I don't know about other firewalls, but recent SonicWalls allow you to create network objects based on FQDN and then use those objects in your rules. Might something like that be an option? It's been exactly the ticket for me when having to deal with a situation similar to what you are facing.
On Tue, Aug 30, 2011 at 9:26 AM, Thomas Mullins <tsmull...@wise.k12.va.us> wrote: > When I ran: > dig +short txt_netblocks.pearsoncmg.com There were no results > returned. > > To check my syntax, I tried the same command on google: > dig +short txt _netblocks.google.com > "v=spf1 ip4:216.239.32.0/19 ip4:64.233.160.0/19 ip4:66.249.80.0/20 > ip4:72.14.192.0/18 ip4:209.85.128.0/17 ip4:66.102.0.0/20 ip4:74.125.0.0/16 > ip4:64.18.0.0/20 ip4:207.126.144.0/20 ip4:173.194.0.0/16 ?all" > > This is what a dig with no modifiers produced: > > dig media.pearsoncmg.com > > ; <<>> DiG 9.6.2-P2 <<>> media.pearsoncmg.com > ;; global options: +cmd > ;; Got answer: > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24005 > ;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 0 > > ;; QUESTION SECTION: > ;media.pearsoncmg.com. IN A > > ;; ANSWER SECTION: > media.pearsoncmg.com. 332 IN CNAME > media.pearsoncmg.com.edgesuite.net. > media.pearsoncmg.com.edgesuite.net. 17780 IN CNAME a1355.g.akamai.net. > a1355.g.akamai.net. 20 IN A 64.208.186.90 > a1355.g.akamai.net. 20 IN A 64.208.186.120 > > ;; Query time: 1564 msec > ;; SERVER: 10.1.1.11#53(10.1.1.11) > ;; WHEN: Tue Aug 30 09:25:55 2011 > ;; MSG SIZE rcvd: 147 > > > Looks like we have reached an impasse. > > Shane > > > -----Original Message----- > From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] > Sent: Tuesday, August 30, 2011 9:26 AM > To: NT System Admin Issues > Subject: RE: How to determine a host's IP range > > Looks like it's hosted by Akamai, which might explain why you can't get an > answer from the folks running the course. > > > > From: Damien Solodow [mailto:damien.solo...@harrison.edu] > Sent: Tuesday, August 30, 2011 8:51 AM > To: NT System Admin Issues > Subject: Re: How to determine a host's IP range > > Do a dig or nslookup on the host; the results will contain all the currently > published IP addresses for it. > -------------------------- > Sent using BlackBerry > > > From: Thomas Mullins [mailto:tsmull...@wise.k12.va.us] > Sent: Tuesday, August 30, 2011 08:40 AM > To: NT System Admin Issues <ntsysadmin@lyris.sunbelt-software.com> > Subject: How to determine a host's IP range > > Good morning everyone, > > Our students have an online class that uses a lot of videos. When ran > through the general student proxy, the quality of these videos is very bad. > In the past when we have these issues, we would route traffic to these hosts > out a NAT gateway. Then we would tell IE not to proxy for that host. This > may not be the best way, but it works for our situation. > > This particular host media.pearsoncmg.com uses a round robin type of DNS. If > you do a DNS lookup today, you may get 64.211.144.100. Then another class > will get something like 69.31.16.217. We have contacted the people who run > the course, and they will not give us the IP range. Is there a way I can > get that information across the net? > > Thanks > Shane > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ > <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to listmana...@lyris.sunbeltsoftware.com > with the body: unsubscribe ntsysadmin > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ > <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to listmana...@lyris.sunbeltsoftware.com > with the body: unsubscribe ntsysadmin > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ > <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to listmana...@lyris.sunbeltsoftware.com > with the body: unsubscribe ntsysadmin > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to listmana...@lyris.sunbeltsoftware.com > with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
