search for: dnsip

I''m re-reading the section on dns names in the shorewall docs: "I personally recommend strongly against using DNS names in Shorewall configuration files. If you use DNS names and you are called out of bed at 2:00AM because Shorewall won''t start as a result of DNS problems then don''t say that you were not forewarned." Having been stung by this a few times

I am running a LEAF Bering firewall with a DMZ at one of my client''s sites. The client has a Windows IIS server set up in the DMZ. The DMZ rules block all outgoing connections on all ports. The client wants to be able to run Windows Update on the server, which uses ports 80 and 443. However, opening all port 80 and 443 connections from the server to the net zone is not an option,

...st.com> wrote: |> | |>> > Has anybody found an elegant way to solve this problem? I am sure that I |>> > am not the only one who has run into this. | |> |> I would imagine that the addresses used for Windows update would be |> resolved by DNS, so a dig/nslookup/host/dnsip query should reveal a list |> of addresses. You may need some trial and error but, together with logging |> on the firewall, it shouldn''t bee too hard. |> In fact I have already done that. However, one can never be guaranteed that a) I wil always have all the possible IP addres...