I'm trying to setup a firewall for one of GNU/Linux systems. AFAIK,
iptables and its ilk cannot make use of FQDNs in their configuration, since they're expected to be operational before the network interface is setup and before access to DNSs are available.
However, from my experience with CentOS, I know of at least one solution:
apf. However, I can't get it to work properly under Arch Linux. (
iptables -nvL produces a clean-slate result; nothing like what I get when executing the same command on our development servers.)
I'm wondering if there's anybody here who's managed to get
apf working on Arch Linux, or knows of another firewall frontend or another firewall altogether that can work with FQDNs in its rules.
Please note that the target FQDNs are from dynamic DNS services like DynDNS. I'd like to know if there's a way to get the firewall to do DNS lookups, the way (I think)
Reverse DNS lookups (which, AFAIK, is what happens when an FQDN is placed in
/etc/hosts.allow and it can't be found in
/etc/hosts) does not work in this case, because, for example, my IP will not resolve to my DynDNS FQDN.
(Also, please tell me if this is better asked on ServerFault.)