This topic contains 3 replies, has 2 voices, and was last updated by Kon 13 years, 2 months ago.
How to define rules using FQDN instead of ip addresses?
You can use domain name to create Rule using Wizard. You can also use aliases.
Just create alias(http://www.google.com) with google subnet or range.
It doesn’t really work in my case.
I have to allow someone, who is using xDSL broadband line where the IP address is dynamically allocated each time when he connects to his ISP, to a computer. Even though I have used a 3rd party service, no-ip.com, to create a permanent FQDN, I still have to modify the ip address in the aliase each time.
You can allow subnet of DSL provider.
It is not possible to filter traffic using domain names (as you have mentioned they may change frequently and resolving DNS entries for each packet would decrease firewall perfomance greatly).