the DNS record on the client. The router’s own services, such as ping, are not handled by the firewall rules. By sending a ping to a full DNS name (without wildcard expressions), the generation of rule resolutions (DNS to IP addresses) can be performed on-demand either from the command line (once) or by a cron job.
Note: Different DNS names that resolve to the same IP address cannot be distinguished. In this case, the first rule that references one of these DNS names will apply. That should not be a problem for large service providers. However, it could occur with small websites hosted by the same vendor.
Example scenario: This example is for configuring the following scenario:- Two Internet connections and a load balancer are available:
- LOADBLANCER with routing tag 0
- INTERNET with routing tag 1 and
- INTERNET2 with routing tag 2
How to configure a scenario like this is described in the following Knowledge Base article |