Results 1 to 8 of 8
  1. #1
    Master Untangler
    Join Date
    Dec 2008
    Location
    Greater Omaha Area
    Posts
    242

    Default Possible to Use DNS Name for Source Address?

    Couldn't find anything about this, tried to add the DNS name (which has like 100 IP's addresses) as a source address and it didn't like it ... seems like there may not be an option to use a DNS name instead of an exhaustive list of IP addresses for the Firewall rules?

    If not, I assume the same would hold true for the Port Forwarding, if we can use a DNS name in the Firewall, then I guess we can't use one in the Port Forwarding either, right?

  2. #2
    Untangler jcoffin's Avatar
    Join Date
    Aug 2008
    Location
    Sunnyvale, CA
    Posts
    6,210

    Default

    As a session comes in, there is no domain name, only IP address. There is no reason for a rule condition which the information does not exist at the time the session arrives.
    Attention: Support and help on the Untangle Forums is provided by
    volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  3. #3
    Master Untangler
    Join Date
    Dec 2008
    Location
    Greater Omaha Area
    Posts
    242

    Default

    Got it, how many IP's can be saved into a single Firewall rule? As in individual, ranges, etc.

  4. #4
    Untangler jcoffin's Avatar
    Join Date
    Aug 2008
    Location
    Sunnyvale, CA
    Posts
    6,210

    Default

    There is no code limit but there is a practical limit based on load and hardware limits. What is your scenario? There might be a better way.
    Attention: Support and help on the Untangle Forums is provided by
    volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  5. #5
    Master Untangler
    Join Date
    Dec 2008
    Location
    Greater Omaha Area
    Posts
    242

    Default

    Switching to a new email gateway, if you do a NSlookup on delivery.antispamcloud.com, you'll get the list of IP addresses. I'm open to a better way than having to manually add each of them to a rule or group into multiple rules, etc.

  6. #6
    Untangler jcoffin's Avatar
    Join Date
    Aug 2008
    Location
    Sunnyvale, CA
    Posts
    6,210

    Default

    I would reject all but from delivery.antispamcloud.com on the Exchange SMTP setting.
    Attention: Support and help on the Untangle Forums is provided by
    volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  7. #7
    Untangle Ninja sky-knight's Avatar
    Join Date
    Apr 2008
    Location
    Phoenix, AZ
    Posts
    21,795

    Default

    Yeah, make your mail server do that lifting.
    Rob Sandling, BS:SWE, MCP
    NexgenAppliances.com
    Phone: 866-794-8879 x201
    Email: support@nexgenappliances.com

  8. #8
    Master Untangler
    Join Date
    Dec 2008
    Location
    Greater Omaha Area
    Posts
    242

    Default

    I'll check further but I'm only seeing an option to add IP addresses or ranges into the Ant-Spam hub transport under Exchange Server which defeats the object of the process as I would prefer to block on the firewall, especially if I'm going to have to enter the IP addresses anyway.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2