Can Domain names spoof the IP that an Internet lookup returns?
Can Internet Firewalls be configured to allow traffic based on dns names? Can something like CBAC or Anonymizer come into play?
What does Internet RFCs require regarding reverse lookups?
This large company (LC-inc) provides over 5000 non-profit agencies with an app to process claims. The non-profits process the claims locally in the app and then select the upload to send files to LC-inc. Once LC-inc completes it processing, the non-profit is notified to download the files for their records thru the app.
LC-inc uses a data center of parallel fail-over locations to provide Internet connectivity to their server.
The app uses java to connect to the LC-inc servers thru the Internet to upload/download latest files.
The non-profit firewalls must be configured to allow the app & Java to connect to the LC-inc server thru the Internet. The LC-inc server uses a STD domain naming convention, ex. link.LCinc.com. The app is configured to connect to link.LCinc.com.
The non-profits set their firewalls to allow traffic to & from the link.LCinc.com IP: 147.150.100.50. (not real IP/Name)
Recently LC-inc changed their IP address; and sent out a notice stating they would no longer publish their IP. The policy states now all non-profits must configure their firewalls to allow traffic to & from link.LCinc.com.
Some could not comply and LC-inc IT dept told them to open the firewall to 147*.*.* - Even if the firewall could do this, it seems unimaginable! Can firewalls handle wildcards like this?
Using Dig - link.LCinc.com resolved to two new IPs; however, on any given day it would be one or the other, never the same one.
i added these IPs to some of the Firewalls and upload/download completed without a hitch.
Note: Reverse lookups on the IP returned the IP number only.
Other more robust Cisco environments received the Server down or unavailable error. However, when they allowed the app PC unrestricted access to the internet - things worked as expected.
Can Domain names spoof the IP that an Internet lookup returns?
Can Internet Firewalls be configured to allow traffic based on dns names? Can something like CBAC or Anonymizer come into play?
What does Internet RFCs require regarding reverse lookups?
Although, this is more than one question, i think they can be answered by the same info.
As always, if not, i am happy to create multiple questions.
Start Free Trial
