[prev in list] [next in list] [prev in thread] [next in thread] 

List:       dante-misc
Subject:    [dante-misc] Understanding name resolution with SOCKS command rules
From:       Jesse Hathaway <jesse () mbuki-mvuki ! org>
Date:       2016-01-29 17:23:53
Message-ID: loom.20160129T181915-80 () post ! gmane ! org
[Download RAW message or body]

If I use the following command rule:

socks block {
       from: 0.0.0.0/0 to: www.example.org
       command: bind connect udpassociate
       log: error # connect disconnect iooperation
}

And my SOCKSv5 client makes a request to www.example.org does the server 
block this request regardless of what ip www.example.org resolves to?

More specifically if a host name resolves to multiple a records, how does 
dante ensure all requests to that host are blocked, does dante block based on 
the hostname, rather than resolving the host to a specific ip?

Thanks, Jesse

[prev in list] [next in list] [prev in thread] [next in thread]