Firewall rules by hostname/domain name

smiggy · Sep 13, 2007, 1:54 PM

I'm interested in using the experimental storm worm DNS-based block list described here:

http://isc.sans.org/diary.html?storyid=3379

I'm using pfSense 1.2-BETA-2 on a WRAP 1E-2. Can the latest version support hostnames/FQDNs (which can change, in the case of blocklists) rather than IPs, or is support for such a feature planned or on anyone's mind?

Thanks!

cmb · Sep 14, 2007, 3:10 AM

I believe you can use Squid for this now.

There are plans for integrating this in firewall rules possibly in the next release after 1.2.

smiggy · Sep 14, 2007, 7:41 AM

@cmb:

There are plans for integrating this in firewall rules possibly in the next release after 1.2.

Whoo! Thanks ;D

tacfit · Sep 19, 2007, 8:21 PM

Good to know. That's been one of the only areas of weakness, as far as I'm concerned.