diff --git a/NEWS b/NEWS
index 70d63bb..07b2f1d 100644
--- a/NEWS
+++ b/NEWS
@@ -10,6 +10,7 @@
 v2.3.1 - not yet released
   - updated netfilter modules:
     * connlimit: add connlimit-upto, connlimit-saddr, connlimit-daddr
+  - @resolve returns IP addresses as-is
 
 
 v2.3 - 30 Mar 2016
diff --git a/src/ferm b/src/ferm
index fa95252..3b1c7a9 100755
--- a/src/ferm
+++ b/src/ferm
@@ -1114,6 +1114,13 @@ sub resolve($\@$) {
 
     my @result;
     foreach my $hostname (@$names) {
+        if (($type eq 'A' and $hostname =~ /^\d+\.\d+\.\d+\.\d+$/) or
+              (($type eq 'AAAA' and
+                $hostname =~ /^[0-9a-fA-F:]*:[0-9a-fA-F:]*$/))) {
+            push @result, $hostname;
+            next;
+        }
+
         my $query = $resolver->search($hostname, $type);
         error("DNS query for '$hostname' failed: " . $resolver->errorstring)
           unless $query;