Re: DNS lookups for hostnames in PF tables

2011-09-10 Thread Nick Holland
On 09/09/11 20:08, ropers wrote: > On 9 September 2011 08:54, Holger Glaess wrote: >> hi >> >> i wrote a perl daemon to handle all these situations. >> >> he resolv the servername and add or delete the ip(s) to an spezific >> table. >> >> maybe it's time to work on a package for ports. >> >> holge

Re: DNS lookups for hostnames in PF tables

2011-09-10 Thread Holger Glaess
hi ok try to explain how it works after i resolve an name , i got one or more ips they add to the pf table by pfctl -ttablename -Tadd resolvedip(s) all these ips have an internal expire time . i compare this time on any interval with the current time . if the get the tame ip from the resolve i

Re: DNS lookups for hostnames in PF tables

2011-09-09 Thread ropers
On 9 September 2011 08:54, Holger Glaess wrote: > hi > > i wrote a perl daemon to handle all these situations. > > he resolv the servername and add or delete the ip(s) to an spezific > table. > > maybe it's time to work on a package for ports. > > holger Maybe I'm terribly confused (so bear with

Re: DNS lookups for hostnames in PF tables

2011-09-09 Thread Holger Glaess
hi i wrote a perl daemon to handle all these situations. he resolv the servername and add or delete the ip(s) to an spezific table. maybe it's time to work on a package for ports. holger > On 2011-09-08, Gerard Lally wrote: >> Hi. >> >> First post. Beginner- to intermediate user. >> >> How do

Re: DNS lookups for hostnames in PF tables

2011-09-08 Thread Johan Linner
$ echo 'match to facebook.com' | pfctl -nvf - match inet from any to 69.63.189.11 match inet from any to 69.63.181.12 match inet from any to 69.63.189.16 it takes all records from the response, but doesn't track updates. If we blocked Facebook at work in Sweden, all employees would leave in a

Re: DNS lookups for hostnames in PF tables

2011-09-08 Thread Stuart Henderson
On 2011-09-08, Gerard Lally wrote: > Hi. > > First post. Beginner- to intermediate user. > > How does PF update a table with hostnames resolved by round-robin DNS? > Is it just the first DNS response that is added to the table, or > multiple DNS responses? $ echo 'match to facebook.com' | pfctl

Re: DNS lookups for hostnames in PF tables

2011-09-08 Thread Kevin Wilcox
On Thu, Sep 8, 2011 at 01:13, Theo de Raadt wrote: >> For example, is it possible to block a well-known social networking >> site which resolves to multiple IP addresses, using a PF table >> with just the hostname of the website? > No. B What you want is to expand to all of the addresses. B Sin

Re: DNS lookups for hostnames in PF tables

2011-09-08 Thread Gerard Lally
On Wednesday, September 07, 2011 11:13 PM, "Theo de Raadt" wrote: > > > > How does PF update a table with hostnames resolved by round-robin > > DNS? Is it just the first DNS response that is added to the table, > > or multiple DNS responses? > > pf doesn't do this, since it is in the kernel. pf o

Re: DNS lookups for hostnames in PF tables

2011-09-07 Thread Theo de Raadt
> First post. Beginner- to intermediate user. > > How does PF update a table with hostnames resolved by round-robin DNS? > Is it just the first DNS response that is added to the table, or > multiple DNS responses? pf doesn't do this, since it is in the kernel. pf only knows about addresses. It

DNS lookups for hostnames in PF tables

2011-09-07 Thread Gerard Lally
Hi. First post. Beginner- to intermediate user. How does PF update a table with hostnames resolved by round-robin DNS? Is it just the first DNS response that is added to the table, or multiple DNS responses? For example, is it possible to block a well-known social networking site which resolves