DNS Name resoltion inside pix

[bquily]

How is it possible for a pix to do name resolution to handle a command such as

"access-list outside_in permit tcp host mail.test.com host x.x.x.x eq smtp"

Thanks

[gfullage]

The PIX doesn't do this. You can add a "name" command and give an IP address to mail.test.com within the PIX config, but the PIX will not do a DNS request for a name found in it's config. This would lead to large packet delays and security holes if someone was able to change the DNS record.

[bquily]

Hello

The problem is that i need to use the name of a server that has multiple Ip addressses that can change.

It is an antivirus mail server relay.

I would like to accept only smtp traffic comming from this particular server name.

It is not possible to enter all ip addresses, and they change.

Thanks