From owner-freebsd-questions  Sat May 16 20:04:03 1998
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id UAA20014
          for freebsd-questions-outgoing; Sat, 16 May 1998 20:04:03 -0700 (PDT)
          (envelope-from owner-freebsd-questions@FreeBSD.ORG)
Received: from alpo.whistle.com (alpo.whistle.com [207.76.204.38])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id UAA19738
          for <freebsd-questions@FreeBSD.ORG>; Sat, 16 May 1998 20:02:22 -0700 (PDT)
          (envelope-from julian@whistle.com)
Received: (from daemon@localhost)
	by alpo.whistle.com (8.8.5/8.8.5) id TAA01631;
	Sat, 16 May 1998 19:52:41 -0700 (PDT)
Received: from current1.whistle.com(207.76.205.22)
 via SMTP by alpo.whistle.com, id smtpd001626; Sun May 17 02:52:33 1998
Date: Sat, 16 May 1998 19:52:30 -0700 (PDT)
From: Julian Elischer <julian@whistle.com>
To: Restricted Use Test Acct <measl@sebastion.mfn.org>
cc: freebsd-questions@FreeBSD.ORG
Subject: Re: IPFW using DNS lookup?
In-Reply-To: <199805162114.QAA02018@sebastion.mfn.org>
Message-ID: <Pine.BSF.3.95.980516195200.17001G-100000@current1.whistle.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

so that if someone can subvert your DNS your filewall is compromised?


On Sat, 16 May 1998, Restricted Use Test Acct wrote:

> 
> Is there any way to get ipfw to lookup a DNS entry so that I can:
> 
> ipfw add 3000 allow udp from archie.cs.mcgill.ca 1023-65535.....
> 
>        or do I have to do this:
> 
> ipfw add 3000 allow udp from 132.206.51.250......
> 
> TIA
> 
> J.A. Terranson
> sysadmin@mfn.org
> 
> A small fading light in a vast and obscure universe...
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message
> 


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message