>>> Lennart Poettering <lennart@xxxxxxxxxxxxxx> schrieb am 16.02.2022 um 18:59 in Nachricht <Yg07j6B0CYTYd1Lr@gardel-login>: > On Mi, 16.02.22 12:13, Dave Howorth (systemd@xxxxxxxxxxxxxx) wrote: > >> > This could be used by applications for auditing/logging services >> > downstream of the resolver, or to update the firewall on the system. >> >> Perhaps an example use case would help but I'm not clear how a DNS >> resolution would usefully cause a state change in the firewall without >> some further external guidance? > > Yeah, I am not sure I grok the relationship to firewalls here, > either. Updatign firewalls asynchronously based on DNS lookups sounds > wrong to me... Unless you want to implement nice backdoors ;-) > > Lennart > > ‑‑ > Lennart Poettering, Berlin