From mboxrd@z Thu Jan 1 00:00:00 1970 From: gabrix Subject: iptables and hostnames. Date: Wed, 04 Oct 2006 15:12:41 +0200 Message-ID: <4523B349.20009@gabrix.ath.cx> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-bounces@lists.netfilter.org Errors-To: netfilter-bounces@lists.netfilter.org Content-Type: text/plain; charset="us-ascii"; format="flowed" To: netfilter@lists.netfilter.org What is the reason why if i use this iptables: > # (APACHE) > $IPT -A INPUT -p tcp -d x.gabrix.ath.cx --dport 80 -m state --state ! > INVALID -j ACCEPT > $IPT -A INPUT -p tcp -d tor.gabrix.ath.cx --dport 443 -m state --state > ! INVALID -j ACCEPT the hostnames you see get resolved to their pubblic ips.This is on an inside lan pc but this doesn't happen on the gateway pc right before it where iptables says it can't resolve the hostnames .Why this ?I have debian sarge kernel 2.6 on all machines. Thanks !