Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Nesting aliases not working

    Scheduled Pinned Locked Moved Firewalling
    3 Posts 2 Posters 1.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      digdast
      last edited by

      I created the following aliases:

      1. ALIAS1
        a. Host: node1.mydomain.com
      2. ALIAS2
        a. Host: node2.mydomain.com
      3. ALIAS3
        a. Host: node3.mydomain.com
        b. Host: node4.mydomain.com
      4. GROUP_ADMINS
        a. Host: ALIAS1
        b. Host: ALIAS2
        c. Host: ALIAS3

      I then created a rule to grant all access to anything behind the firewall from alias GROUP_ADMINS. However, I cannot seem to get past the firewall. I look in the logs, and I see it rejecting my requests.

      I then went back in and reconfigured the GROUP_ADMINS alias like this:

      1)      GROUP_ADMINS
      d.      Host: node1.mydomain.com
      Host: node2.mydomain.com
      Host: node3.mydomain.com
      Host: node4.mydomain.com

      I can now access anything beyond the firewall fine from the specified nodes.

      So, it seems even though we are allowed to plug in an alias within an alias, nested aliases do not  work. Has anyone else seen this behavior? Is this a known issue? Or are we doing something wrong?

      1 Reply Last reply Reply Quote 0
      • C
        cmb
        last edited by

        does it work if they're IPs rather than hostnames?

        1 Reply Last reply Reply Quote 0
        • D
          digdast
          last edited by

          @cmb:

          does it work if they're IPs rather than hostnames?

          Im sure it would work with IP addresses but a lot of the host are dynamic and I need to be able to do it with host names any help would be very much appreciated.
          ???

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.