Re: 2.0.36: DNS caching inside kernel with ipfwadm?

[David L. Parsley (lkml account)]

Hi Paul,
        The kernel doesn't know anything about DNS names; when you enter a
rule, ipfwadm looks up the IP, and the IP number goes into the kernel
tables.  You don't need to reboot, you can just flush your firewall rules
and re-run the script that sets them up. 

HTH,
        David

On Tue, 8 Jun 1999, Paul Wouters wrote:

> 
> We have some accounting scripts that run nightly ipfwadm scripts and I
> noticed that using ipfwadm -A -l and -A -l -n shows that the DNS name for
> an IP number we changed last week didn't make it into the ipfwadm list yet.
> 
> This is rather confusing because we now have no clue where some things are
> counted. We have the following scenario. We're counting two IP numbers,
> which have DNS names of foo.com and www.foo.com. Now, the www service moved 
> from one machine to the other. So foo.com becomes foo.com as well as 
> www.foo.com, and the old www.foo.com becomes www2.foo.com.
> 
> Now using ipfwadm -A -l | grep www2.foo.com yields nothing. So I'm assuming
> the old foo.com/www.foo.com are still used somehow by the kernel? Is there
> anyway to fix this? It would be rather silly to have to reboot for this.
> 
> Paul
> -- 
> 
> If only the OpenSource community would be willing to built my website....
> 
> -
> To unsubscribe from this list: send the line "unsubscribe linux-net" in
> the body of a message to [EMAIL PROTECTED]
> 

- --
David L. Parsley
Network Specialist
City of Salem Schools

-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to [EMAIL PROTECTED]