From mboxrd@z Thu Jan 1 00:00:00 1970 From: Grant Taylor Subject: Re: allowing packets from dynamic-dns IP Date: Sat, 26 Apr 2008 14:42:39 -0500 Message-ID: <481385AF.2020309@riverviewtech.net> References: <48138190.8030305@riverviewtech.net> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: Sender: netfilter-owner@vger.kernel.org List-ID: Content-Type: text/plain; charset="us-ascii"; format="flowed" To: Mail List - Netfilter On 4/26/2008 2:29 PM, Jan Engelhardt wrote: > It is the same -- the dynamic system runs a custom script in ifup > that notifies the static one. Can be portknocking, or a http, or a > netcat. Presuming that the dynamic system is a Linux box, sure. However there are a LOT of devices that can utilize dynamic DNS that do not have the capability (through the provided interface(s)) to make those types of changes. > So why not just set up an ipsec tunnel... :^) Not everything can do an IPSec tunnel, nor will all devices in between play well with IPSec tunnels. We don't know enough about the endpoints and / or what is in between to know if any thing like this will work. If this will work, this may indeed be better. Grant. . . .