firewall rule to DNS destination instead of IP

[robertkwild]

hi all,

making a firewall rule but instead of the destination being an "ip" i want it to be a "DNS" record, is it possible to put in a DNS name ie dns.msftncsi.com and that resolves to the ip

if not has it got the plugin squid?

thanks,
rob

[tiermutter]

Create an alias containing the URL and set the fw rule destination to this alias

[yourfriendarmando]

This is very good to know

I'm sure this is costly L7 to L4 transition, short of loading an alias with IP blocks, or implementing proxy

[Spoonman2002]

hi all,

making a firewall rule but instead of the destination being an "ip" i want it to be a "DNS" record, is it possible to put in a DNS name ie dns.msftncsi.com and that resolves to the ip

if not has it got the plugin squid?

thanks,
rob

You cannot use a DNS name in a firewall rule, only IP addresses.
You can use aliases in OPNsense and define a host/DNS name in there.