Multiple IP DNS Host Alias

[Guest]

I was wondering if someone could point out my mistake here. I'm attempting to create an alias for a DNS Host that has multiple IPs associated with it. Then by using firewall rules change the gateway for these DNS hosts.

I have an issue though that it is only routing the first IP it finds in the DNS record. How can I make it so that all the IPs associated with that domain are routed?

I use Astaro in another location and it's a simple task of adding a "DNS Group" definition but I guess this is probably called something different in PFSense. I have tried both Hosts and Networks Aliases.

Thanks

[cmb]

Aliases that use FQDNs cannot be used with ones that return multiple IPs, or change on each query, it only uses the first IP.

[jimp]

Actually, I'm not sure if it's new for 2.1 or not but we do use all IPs returned in a query for aliases.

A rotating answer (one that changes each query) can't be used effectively, but if a query always returns the same set of IPs, that should work.

If I add an alias for "www.google.com" and add it to a rule, the resulting table contains many IPs.

I'd have to track down a 2.0.1 box to see if the behavior is the same, but I thought it was there. Perhaps it's the method used by your DNS server to return the IPs that isn't working.

$ host www.google.com
www.google.com is an alias for www.l.google.com.
www.l.google.com has address 173.194.37.49
www.l.google.com has address 173.194.37.51
www.l.google.com has address 173.194.37.48
www.l.google.com has address 173.194.37.50
www.l.google.com has address 173.194.37.52

: pfctl -T show -t google
   173.194.37.48
   173.194.37.49
   173.194.37.50
   173.194.37.51
   173.194.37.52