Re: host names and IPs

[davidsen@tmr.com (bill davidsen)]

In article <003301c305a1$c04ab1a0$0500a8c0@effenberger>,
Florian Effenberger <floeff@arcor.de> wrote:

| I'm on Linux 2.4.20 with iptables 1.2.7a. I have a syntax as follows:
| 
| ===
| iptables -A INPUT -p tcp -s www.myhostname.com --dport 53 -j ACCEPT
| ===

What is it you're trying to do here? A packet with your source address
would be going through the OUTPUT table, no? An INPUT packet with your
own IP would be spoofed. Are you trying to accept DNS requests from
yourself, in tcp (instead of normal udp) mode?

| Now it seems that www.myhostname.com is resolved only the first time the
| rule is set and that a fixed IP address is stored.
| 
| However, www.myhostname.com has a dynamically assigned address and I would
| like to have iptables resolve the IP address everytime.
| 
| Is that possible? If yes, how? Or will it produce too much load?

There are several ways to re-resolve it, but I'm not clear on why you
don't just specify by interface.

How about some clarification on what you're trying to do, rather than
how you want to do it?
-- 
bill davidsen <davidsen@tmr.com>
  CTO, TMR Associates, Inc
Doing interesting things with little computers since 1979.