> I currently have an ISP that has multiple address ranges that I wish > to accept in my iptables ruleset. Is it possible for me to use the > DNS Suffix instead of the actual ip as they are currently dynamically > assigned. e.g. iptables -s nsw.bigpond.net.au (current assigned > address is cpe-203-45-103-100.nsw.bigpond.net.au). AFAIK: no. An iptables rule will do a DNS lookup for a *hostname*, but only once: when the rule is created. Grts, Rob
