Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Is there a way to specify a fqdn instead of an ip address?

    Scheduled Pinned Locked Moved Firewalling
    4 Posts 3 Posters 3.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • F
      fluca1978
      last edited by

      Hi all,
      in 1.2.3 is there a way to build a rule against a fully qualified domain name of an host instead of an ip address? Let's say I want to build a rule against www.kde.org instead of all of its ip addresses. DO I have to define an alias and group each ip address there?
      Thanks.

      1 Reply Last reply Reply Quote 0
      • W
        wm408
        last edited by

        Fluca,

        I kind of asked this question the other day and haven't gotten a response: http://forum.pfsense.org/index.php/topic,39549.0.html

        Basically, the topic was discussed in the past for 2.0.x to have this reverse lookup implemented and I am trying to get clarification if it is in 2.0.x, because I haven't seen anything that says it is or will be implemented.

        I've read that it creates a little overhead in the rule translation because of that extra time it takes to resolve than just an IP, but for the most part, its pretty fast.

        So, can you do an FQDN in 1.2.3?  From my usage over the past couple of years, I wouldn't think so.  But.. 2.0.x is possible.

        1 Reply Last reply Reply Quote 0
        • jimpJ
          jimp Rebel Alliance Developer Netgate
          last edited by

          You can, in aliases, in 2.0. They are re-resolved periodically.

          You can also do this in 1.2.3 but in a hackish way.

          • It only works with the second or later value in an alias
          • It only resolves when the filter ruleset is (re)loaded, so basically when you save/apply. You can cron a filter reload if you really want to hack it up.

          Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

          Need help fast? Netgate Global Support!

          Do not Chat/PM for help!

          1 Reply Last reply Reply Quote 0
          • W
            wm408
            last edited by

            Thx Jimp!

            @jimp:

            You can, in aliases, in 2.0. They are re-resolved periodically.

            You can also do this in 1.2.3 but in a hackish way.

            • It only works with the second or later value in an alias
            • It only resolves when the filter ruleset is (re)loaded, so basically when you save/apply. You can cron a filter reload if you really want to hack it up.
            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.