CentOS - Oct 2009 - iptables -d fqdn instead of IP

Hi all,

does it work to define iptables rules with a fqdn as destination
instead of an IP address? Or is it useful to resolve the name first
using e.g. nslookup, writing the result to a variable which is then
used within the -d statement?

Best Regards
Marcus

Yes it works, but using fqdn as destination, iptables can take too
long time to resolve the address.
Using nslookup is a better solution, I think.

Vin?cius Coque

On Wed, Oct 28, 2009 at 6:44 PM, Marcus Moeller <mail at
marcus-moeller.de> wrote:
> Hi all,
>
> does it work to define iptables rules with a fqdn as destination
> instead of an IP address? Or is it useful to resolve the name first
> using e.g. nslookup, writing the result to a variable which is then
> used within the -d statement?
>
> Best Regards
> Marcus
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> http://lists.centos.org/mailman/listinfo/centos
>

On Wednesday 28 October 2009 16:44, Marcus Moeller wrote:
>  does it work to define iptables rules with a fqdn as destination
>  instead of an IP address? Or is it useful to resolve the name first
>  using e.g. nslookup, writing the result to a variable which is then
>  used within the -d statement?
Best bet it to stay with the address.


-- 

Regards
Robert

Linux User #296285
http://counter.li.org