ruel using dns name


#1

Hi,
I try to set up one firewall rule using the dns name instead of the IP.
But when I commit the configuration I have an error.
I try to do the follow:
set firewall name lan-to-wan rule 20 destination address office365.com

but at the commit I have the message tha office365.com is not a valid IP address.


#2

The destination address to match. Supported formats are as follows:
ip-address: An IPv4 address.
ip-address/prefix: A network address, where 0.0.0.0/0 matches any network.
ip-address–ip-address: A range of contiguous IP addresses; for example, 192.168.1.1–192.168.1.150.
!ip-address: Matches all IP addresses except the one specified.
!ip-address/prefix: Matches all network addresses except the one specified.
!ip-address–ip-address: Matches all IP addresses except those in the specified range.
If both address and port are specified, the packet is considered a match only if both the address and the port match.

So you can’t have a rule with a domain name.