I'd argue that "DNS" clue pushes the firewall out from a packet inspection thing and into a user-space application inspection thing. DNS entries in filter rules doesn't work as well in all situations as you'd like. :) Adrian (who has done this, and it doesn't quite work right in all situations thanks to split-horizon, per-user, geo-location, server-balancing DNS..) On 6 September 2010 08:31, jhell <jhell_at_dataix.net> wrote: > On 09/05/2010 11:53, Luigi Rizzo wrote: >> whereas one might want a more dynamic behaviour (e.g. refresh >> whenever the DNS response expires). > > Lord that would be nice! if only PF had this ;) > > -- > > jhell,v > _______________________________________________ > freebsd-current_at_freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-current > To unsubscribe, send any mail to "freebsd-current-unsubscribe_at_freebsd.org" >Received on Mon Sep 06 2010 - 04:47:07 UTC
This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:40:07 UTC