D&C GLug - Home Page

[ Date Index ] [ Thread Index ] [ <= Previous by date / thread ] [ Next by date / thread => ]

Re: [LUG] Transparent proxying using iptables

 

On Fri, 6 Oct 2006, Simon Williams wrote:

> As an aside, why doesn't the DNAT target support DNS lookups?

Firewalls don't tend to allow you to put hostnames instead of IPs in their 
configuration as if you had a hostname and somone was to crack/poisin your 
DNS then they'd implicitly change you firewall rules.  How scary would 
that be?

Alex.

-- 
The Mailing List for the Devon & Cornwall LUG
http://mailman.dclug.org.uk/listinfo/list
FAQ: http://www.dcglug.org.uk/linux_adm/list-faq.html