Re: Hostnames with hyphens

Philip Pemberton via Shorewall-users <[email protected]> Sun, 2 Feb 2025 22:50:18 +0000
Newsgroups gmane.comp.security.shorewall
Message-ID <[email protected]>
On 02/02/2025 21:19, Tuomo Soini via Shorewall-users wrote:
> Hyphen is not the issue. Issue is non-fqdn hostname, I'd guess.
> Documentation is very clear, it advices against dns names.
> Please read this part of documentation carefully and please, don't use
> dns name in config.
> 
> https://shorewall.org/manpages/shorewall-names.html#idm30

Nope, it's definitely the hyphen. I changed one of the "rules" lines to:

SMTP/DNAT       net             loc:int-mailserver.locnet.philpem.me.uk

And got a very similar error:

shorewall[2924742]:    ERROR: Invalid IP Address (int) 
/usr/share/shorewall/macro.SMTP (line 12)
shorewall[2924742]:       from /etc/shorewall/rules (line 84)

Note that in the error, only the part of the FQDN before the hyphen is 
shown: Shorewall is trying to resolve "int", which doesn't exist.

I've read the documentation and am aware of its limitations.

I only use this feature for hostnames on my own local LAN, defined in 
the router's /etc/hosts (they're served with dnsmasq). Life is just 
easier when everything is in one place.

Thanks.
-- 
Phil.
[email protected]
https://www.philpem.me.uk/