On 10/10/2012 3:13 PM, Arturo Borrero wrote:
Hi there!
I've been doing some test, and I'm unable to get all A or AAAA registers of
a FQDN inside a set (i.e. hash:ip).
Try it yourself:
$ host dl.dropbox.com
[6 ips]
# ipset create hash:ip test
# ipset add test dl.dropbox.com
# ipset list test
[just 1 ip]
I took a look at the source of ipset (on git repo), but I was unable to
determine where in the code the desition of drop (or ignore) additional DNS
resolutions is being taken. (Yes, i'm a noob programmer)
Any idea?
Best regards.
you can use some script to do the resolving and then add the results to
the set one by one.
how ipset behave is the same as iptables.
Regards,
Eliezer
--
Eliezer Croitoru
https://www1.ngtech.co.il
IT consulting for Nonprofit organizations
eliezer <at> ngtech.co.il
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
