• SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

Recent content by ioan

  1. I

    Using fqdn instead of IP in Asus-Merlin firewall rules

    Many thanks for all the advice, ioan
  2. I

    Using fqdn instead of IP in Asus-Merlin firewall rules

    Let's say there are five incoming ssh connections from the internet going through the Asus Merlin into my LAN. The sources themselves are behind Asus routers with DDNS client enabled, so that the fqdn will be updated with current IP. I want to update my firewall rules for these five sources...
  3. I

    Using fqdn instead of IP in Asus-Merlin firewall rules

    How about adapting the script below written for ufw to Asus Merlin? It is from the link I gave above. #!/bin/bash target_hosts="dynhost.does-not-exist.com another-host.does-not-exist.com" if [ -f "/root/dynblock-curr" ]; then mv /root/dynblock-curr /root/dynblock-prev fi touch...
  4. I

    Using fqdn instead of IP in Asus-Merlin firewall rules

    It sounds good, but would this break all active connections at the time of recreation?
  5. I

    Using fqdn instead of IP in Asus-Merlin firewall rules

    Hi, Thank you for your reply. I'd need to do nslookup on the fqdn, detect change, remove old firewall rule (with old IP), generate firewall rule with new IP. And all this should be done under cron every 10 min.
  6. I

    Using fqdn instead of IP in Asus-Merlin firewall rules

    Hi everybody, I'd like to use fqdn instead of IPs in some specific firewall rules. I found the link below showing how to do that on a generic Linux box. How about applying this on an Asus-Merlin box? Probably by using the firewall-start and nat-start scripts, but how exactly would we do that...
Back
Top