From owner-freebsd-questions@freebsd.org Sun Sep 17 08:26:38 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 0BC89E034D3 for ; Sun, 17 Sep 2017 08:26:38 +0000 (UTC) (envelope-from 4250.10.freebsd-questions=freebsd.org@email-od.com) Received: from bca5.email-od.com (bca5.email-od.com [207.246.239.5]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id D6ABA76F3A for ; Sun, 17 Sep 2017 08:26:37 +0000 (UTC) (envelope-from 4250.10.freebsd-questions=freebsd.org@email-od.com) DKIM-Signature: v=1; a=rsa-sha256; d=email-od.com;i=@email-od.com;s=dkim; c=relaxed/relaxed; q=dns/txt; t=1505636792; x=1508228792; h=x-thread-info:date:from:to:subject:message-id:in-reply-to:references:mime-version:content-type:content-transfer-encoding; bh=HmteFSBngKeY4XrS4/4P5qTBvU1uuocOMiOoAIZUGsE=; b=ZACxi3gVgR1miHSiZ2lAJL6JdD5wJ5JkYZUMBnc8bmH4jJ9TrNfZ1HF0eiu8D6f79NU9pVPobIcLLOv/u5mT9ajIvh0Ovzyf/ZGR6DuBfQ72pi0TK5Cl73ufVvy+1efanyEah9Lakx+QgDqKzaZUnn4HyIyLzAo70ptnAQNsW7o= X-Thread-Info: NDI1MC4xMi5lMTAwMDAwMDIzMTEwZi5mcmVlYnNkLXF1ZXN0aW9ucz1mcmVlYnNkLm9yZw== Received: from r2.h.in.socketlabs.com (r2.h.in.socketlabs.com [142.0.180.12]) by bca2.email-od.com with ESMTP(version=Tls12 cipher=Aes256 bits=256); Sun, 17 Sep 2017 04:26:17 -0400 Received: from smtp.lan.sohara.org (EMTPY [89.127.62.20]) by r2.h.in.socketlabs.com with ESMTP(version=Tls12 cipher=Aes256 bits=256); Sun, 17 Sep 2017 04:26:22 -0400 Received: from [192.168.63.1] (helo=steve.lan.sohara.org) by smtp.lan.sohara.org with smtp (Exim 4.89 (FreeBSD)) (envelope-from ) id 1dtUuB-000JXj-NB for freebsd-questions@freebsd.org; Sun, 17 Sep 2017 08:26:19 +0000 Date: Sun, 17 Sep 2017 09:26:19 +0100 From: Steve O'Hara-Smith To: freebsd-questions@freebsd.org Subject: Re: Help scripting dns lookup using awk Message-Id: <20170917092619.86bbda0e16ddb3a06120c65f@sohara.org> In-Reply-To: <70d0b776-f250-594d-5e47-f80c1077b425@FreeBSD.org> References: <59BB24E4.6060908@gmail.com> <20170915143019.2e02d386@gumby.homeunix.com> <59BC6036.8040709@gmail.com> <59BD3410.80708@gmail.com> <70d0b776-f250-594d-5e47-f80c1077b425@FreeBSD.org> X-Mailer: Sylpheed 3.5.1 (GTK+ 2.24.31; amd64-portbld-freebsd11.0) X-Clacks-Overhead: "GNU Terry Pratchett" Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 17 Sep 2017 08:26:38 -0000 On Sun, 17 Sep 2017 08:21:23 +0100 Matthew Seaman wrote: > This works best with unencrypted traffic, but can also be made to work > with HTTPS, although not quite as effectively. It is also possible for > a motivated person to use VPN software to get around this sort of > restriction, Blocking all unproxied outside access kills that option, leaving esoterica like IP/DNS as the only options to bypass security. -- Steve O'Hara-Smith