Periodic DNS resolution

2014-09-28 Thread Austin Gilbert
A problem that seems to come up over and over again with egress filtering 
firewalls are sites that move IPs so the names need to be resolved periodically 
and rules updated. 

I recently migrated to using pf and was wondering if anyone had suggestions for 
how they tackle this problem.

I realize I could create cron jobs with scripts to do this, but was curious if 
there was a better way.

I'd eventually like to track changes and log them as well.

Cheers,
Austin



Re: Periodic DNS resolution

2014-09-28 Thread David Gwynne
i run some scripts out of cron (and from rc.local on boot) to keep some tables 
in sync with DNS. the scripts are perl so i can use Net::DNS, but apart from 
that its been pretty robust and straightforward.

dlg

On 29 Sep 2014, at 11:44, Austin Gilbert austin.gilb...@gmail.com wrote:

 A problem that seems to come up over and over again with egress filtering 
 firewalls are sites that move IPs so the names need to be resolved 
 periodically and rules updated. 
 
 I recently migrated to using pf and was wondering if anyone had suggestions 
 for how they tackle this problem.
 
 I realize I could create cron jobs with scripts to do this, but was curious 
 if there was a better way.
 
 I'd eventually like to track changes and log them as well.
 
 Cheers,
 Austin