Re: Inserting new rule with wildcard

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk4j9qEACgkQKL4IzOyjSrZoqgCfe0ZL6sCP4TVXcwu+dvdk7ctB
M3cAoN/8WudNagraAXpo6JmQ8yrjx1y0
=rqmH
-----END PGP SIGNATURE-----
18.7.2011 11:31, tower kirjoitti:
> Hi
>
> Is there any way of use asterisk as wilcard in iptables rule?
>
> For example:
>
> iptables -I OUT_APACHE -d *.fbcdn.com -j ACCEPT
> iptables v1.3.3: host/network `*.fbcdn.com' not found
>
> or
>
> iptables -I OUT_APACHE -d '*.fbcdn.com' -j ACCEPT
> iptables v1.3.3: host/network `*fbcdn.com' not found
>
> or
>
> iptables -I OUT_APACHE -d "*.fbcdn.com" -j ACCEPT
> iptables v1.3.3: host/network "*.fbcdn.com' not found
>
> returns error.
>
> Regards!
>

iptables uses IP-addresses, but if you enter a DNS-name it tries to
resolve it to an IP-address. You have to figure out somehow the
netblock/mask for fbcdn.com and enter that.

--

Q: How do you stop an elephant from charging?
A: Take away his credit cards.