From: Eliezer Croitoru <eliezer@ngtech.co.il>
To: Arturo Borrero <aborrero@cica.es>
Cc: netfilter@vger.kernel.org
Subject: Re: [ipset] adding a fqdn and get all A or AAAA registers in the set
Date: Wed, 10 Oct 2012 16:42:54 +0200 [thread overview]
Message-ID: <5075896E.8030305@ngtech.co.il> (raw)
In-Reply-To: <CAPfcJatY3XEfyE8YmBwMZQQkQ5gkVdnxdaSsm0cj1d9u3_Bz5A@mail.gmail.com>
On 10/10/2012 3:13 PM, Arturo Borrero wrote:
> Hi there!
>
> I've been doing some test, and I'm unable to get all A or AAAA registers of
> a FQDN inside a set (i.e. hash:ip).
>
> Try it yourself:
>
> $ host dl.dropbox.com
> [6 ips]
> # ipset create hash:ip test
> # ipset add test dl.dropbox.com
> # ipset list test
> [just 1 ip]
>
> I took a look at the source of ipset (on git repo), but I was unable to
> determine where in the code the desition of drop (or ignore) additional DNS
> resolutions is being taken. (Yes, i'm a noob programmer)
>
> Any idea?
>
> Best regards.
you can use some script to do the resolving and then add the results to
the set one by one.
how ipset behave is the same as iptables.
Regards,
Eliezer
--
Eliezer Croitoru
https://www1.ngtech.co.il
IT consulting for Nonprofit organizations
eliezer <at> ngtech.co.il
next prev parent reply other threads:[~2012-10-10 14:42 UTC|newest]
Thread overview: 9+ messages / expand[flat|nested] mbox.gz Atom feed top
[not found] <CAPfcJasWf=w1U=wK=ErOH+w6veOgUdjTFbp1JiqjXVYE=7Ay0w@mail.gmail.com>
2012-10-10 13:13 ` [ipset] adding a fqdn and get all A or AAAA registers in the set Arturo Borrero
2012-10-10 13:25 ` Jozsef Kadlecsik
2012-10-10 14:42 ` Eliezer Croitoru [this message]
2012-10-10 17:58 ` Arturo Borrero
2012-10-10 18:06 ` Jozsef Kadlecsik
2012-10-10 18:27 ` Arturo Borrero
2012-10-11 10:09 ` Eliezer Croitoru
2012-10-11 10:15 ` Arturo Borrero
2012-10-12 1:46 ` Eliezer Croitoru
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=5075896E.8030305@ngtech.co.il \
--to=eliezer@ngtech.co.il \
--cc=aborrero@cica.es \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox