On Wed, 09 Mar 2005 08:29:23 +0200, Brent Clark <bclark@xxxxxxxxxxxxxxxxxxxx> wrote: > Sebastian Docktor wrote: > > Hi, > > > > I want to allow a Dynamic DNS Client to Access the SSH-Server > > on my Firewall. But I don't want to open SSH for all IPs, > > Is it possible that iptables always looks up the ip address from the > > hostname, so that only the ip has access which is registrated under > > the dyndns? > > > > > > Hi > > This may be a ridiculous suggestion. > > How about basing it on MAC address. > > Stupid I know. > > Buts all I could think off. > > Brent Clark > > I'm not too sure either, but I do know that iptables resolve the names the moment the rule is added, not again. Unless you run the rule every minute to make sure it's updated constantly. Can't you setup SSHD to only allow connections from certain hosts? Then again sshd might use the reverse lookup of the ip, which isn't always the dyndns name... Will you let us know how you achieve this? -- Kenneth Kalmer kenneth.kalmer@xxxxxxxxx http://opensourcery.blogspot.com
