IP Firewalling by DNS name

Daniel Gerzo danger at rulez.sk
Tue May 31 08:22:25 PDT 2005


Hello Ivan,

Tuesday, May 31, 2005, 4:43:16 PM, si pisal:

> Is it possible to use ipfw to filter packets by domain name?

> What I need it for: I'd like to allow ssh logins only from a specific
> TLD (by reverse lookup...) - maybe there's another way?

you can use AllowUsers sshd_config directive e.g:

AllowUsers user@*.domain.tld

or something like:

AllowUsers user at 111.111.111.*

I think this is possible too.

-- 
Sincerely,

 DanGer, ICQ: 261701668  | e-mail protecting at: http://www.2pu.net/
 http://danger.rulez.sk  | proxy list at:        http://www.proxy-web.com/
                         | FreeBSD - The Power to Serve!



More information about the freebsd-stable mailing list