Hello, I need to use an hostname in a pf rule to allow a connection. The hostname is needed because the resolution is dynamic, it can change at any minute (TTL 60).
Is there a flag to tell pf to resolve the name each time it tries to match this part? The domain name server is trusted and near/fast the pf host, The rules are written so that this rule is not read often. There's no no problem if pf slows down because of name resolution times. I've seen I can do it with an anchor and a script flushing/adding the hostname each minute or less, I ask if there's a way less complicated and more understandable (reading pf.conf). Thanks in advance. -- Au revoir, 09 51 84 42 42 Gilles Lamiral. France, Baulon (35580) 06 20 79 76 06