Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.os.linux.networking > #3460

Re: Blocking top level domains

From Pascal Hambourg <boite-a-spam@plouf.fr.eu.org>
Newsgroups comp.os.linux.networking
Subject Re: Blocking top level domains
Date 2015-08-08 17:52 +0200
Organization Plouf !
Message-ID <mq58k9$4lj$1@saria.nerim.net> (permalink)
References <mq38o7$4p6$1@news.albasani.net> <mq4ek6$2u7e$1@saria.nerim.net> <_yoxx.29114$DJ6.2305@fx15.iad>

Show all headers | View raw


Lew Pitcher a écrit :
> On Saturday August 8 2015 04:28, in comp.os.linux.networking, "Pascal
> Hambourg" <boite-a-spam@plouf.fr.eu.org> wrote:
> 
>> Iptables packet filter does not understand DNS.
> 
> Sorry, but I have to differ
> 
> You /can/ write Iptables rules that specify DNS FQDN or network names.

No, you cannot.
You can use domain/host/network names as source or destination when
creating a rule, but then the names are resolved into IP addresses at
create time and the resulting rules only contain IP addresses.

> The -s (--source) and -d (--destination) options that permit you to specify
> the inspected IP packet's source IP address and destination IP address allow
> for "network name" or "host name" values, along with IP addresses and IP
> addresses with network mask.

The iptables userland command is not the iptables kernel packet filter.

Back to comp.os.linux.networking | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Blocking top level domains "James H. Markowitz" <noone@nowhere.net> - 2015-08-07 21:42 +0000
  Re: Blocking top level domains Vilmos Soti <vilmos@soti.ca> - 2015-08-07 21:02 -0700
    Re: Blocking top level domains Ian Zimmerman <itz@buug.org> - 2015-08-08 08:09 -0700
      Re: Blocking top level domains "James H. Markowitz" <noone@nowhere.net> - 2015-08-08 21:25 +0000
        Re: Blocking top level domains Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2015-08-08 23:31 +0200
        Re: Blocking top level domains William Unruh <unruh@invalid.ca> - 2015-08-09 13:51 +0000
          Re: Blocking top level domains "James H. Markowitz" <noone@nowhere.net> - 2015-08-09 15:57 +0000
            Re: Blocking top level domains William Unruh <unruh@invalid.ca> - 2015-08-09 16:38 +0000
              Re: Blocking top level domains Clark Smith <noaddress@nowhere.net> - 2015-08-09 23:30 +0000
      Re: Blocking top level domains Vilmos Soti <vilmos@soti.ca> - 2015-08-08 22:33 -0700
  Re: Blocking top level domains Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2015-08-08 10:28 +0200
    Re: Blocking top level domains Jorgen Grahn <grahn+nntp@snipabacken.se> - 2015-08-08 12:48 +0000
    Re: Blocking top level domains Lew Pitcher <lew.pitcher@digitalfreehold.ca> - 2015-08-08 10:42 -0400
      Re: Blocking top level domains Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2015-08-08 17:52 +0200
  Re: Blocking top level domains Marc Haber <mh+usenetspam1118@zugschl.us> - 2015-08-08 15:09 +0200
  Re: Blocking top level domains Joe Beanfish <joebeanfish@nospam.duh> - 2015-08-09 01:33 +0000

csiph-web