Thread: IPTables couldn't filter dns

I want to using iptables in order to filter DNS instead of IP
I don't have any thing documents mention this
please help me, thanks

What do you mean my Filter DNS?
Do you want to allow/deny DNS queries or do you mean FQDN's?
If it is DNS queries please make sure that DNS uses both TCP as well as UDP protocol to work..

I know what you mean. You want to use domain names instead of IP addresses. The main trouble with using hostnames with iptables is that the IP is resolved at the time the rule is added. Also kernel cant wait for DNS to resolve IP address, that would be so slow.