FQDN

[mohamed8080]

hello everyone
Can i use FQDN on firewall rules.

[Gertjan]

Like adding it here Firewall > Aliases > URLs and using the Alias created in a firewall rule ?
So yes.

It would work well if the FQDN resolves to a single A or AAAA - even if this A or AAAA changes ones in a while (DYNDNS).

[mohamed8080]

@Gertjan your are the best gertjan

thanks but how can i resolves to a single A or AAA

[Gertjan]

You don't need to.
I was mentioning "a single A or AAAA" because you can not use an alias like "facebook.com" which can resolve to hundreds of IP's.
A URL-Alias works fine for your site, my web site, the ones with a single IP.

When you define an URL firewall alias, check out the resolver logs.
You'll l be seeing lines like :

Looking a bit closer and you see a task runs every 5 minutes or so to re resolve all the URL you use. If one changes, the firewall rules are reload.

[mohamed8080]

@Gertjan thanks