Big FQDN list cause UI and FLEX H lockup
FLEX 200H 1.30(ABWV.0)
So I have a group (one big one with 2 in) of FQDN and its causing a lockup here is the list I also have a big list of SMTP address ranges
This is a Error after a reboot
/ object address-object address "office_com" "type" "fqdn" "*.office.com" "expire_ttl" "true" / object address-object address "microsoft_com" "type" "fqdn" "*.microsoft.com" "expire_ttl" "true" / object address-object address "office365_com" "type" "fqdn" "*.office365.com" "expire_ttl" "true" / object address-object address "bing_com" "type" "fqdn" "*.bing.com" "expire_ttl" "true" / object address-object address "trafficmanager_net" "type" "fqdn" "*.trafficmanager.net" "expire_ttl" "true" / object address-object address "windowsupdate_com" "type" "fqdn" "*.windowsupdate.com" "expire_ttl" "true" / object address-object address "thunderbird_net" "type" "fqdn" "*.thunderbird.net" "expire_ttl" "true" / object address-object address "gmail_com" "type" "fqdn" "*.gmail.com" "expire_ttl" "true" / object address-object address "msedge_net" "type" "fqdn" "*.msedge.net" "expire_ttl" "true" / object address-object address "pki_goog" "type" "fqdn" "*.pki.goog" "expire_ttl" "true" / object address-object address "google_com" "type" "fqdn" "*.google.com" "expire_ttl" "true" / object address-object address "googleapis_com" "type" "fqdn" "*.googleapis.com" "expire_ttl" "true" / object address-object address "blueyonder_co_uk" "type" "fqdn" "*.blueyonder.co.uk" "expire_ttl" "true" / object address-object address "globalsign_com" "type" "fqdn" "*.globalsign.com" "expire_ttl" "true" / object address-object address "cloudflare_net" "type" "fqdn" "*.cloudflare.net" "expire_ttl" "true" / object address-object address "virginmedia_com" "type" "fqdn" "*.virginmedia.com" "expire_ttl" "true" / object address-object address "microsoftonline_com" "type" "fqdn" "*.microsoftonline.com" "expire_ttl" "true" / object address-object address "akadns_net" "type" "fqdn" "*.akadns.net" "expire_ttl" "true" / object address-object address "gamepass_com" "type" "fqdn" "*.gamepass.com" "expire_ttl" "true" / object address-object address "azureedge_net" "type" "fqdn" "*.azureedge.net" "expire_ttl" "true" / object address-object address "linkedin_com" "type" "fqdn" "*.linkedin.com" "expire_ttl" "true" / object address-object address "live_com" "type" "fqdn" "*.live.com" "expire_ttl" "true" / object address-object address "bingapis_com" "type" "fqdn" "*.bingapis.com" "expire_ttl" "true" / object address-object address "msn_com" "type" "fqdn" "*.msn.com" "expire_ttl" "true" / object address-object address "scorecardresearch_com" "type" "fqdn" "*.scorecardresearch.com" "expire_ttl" "true" / object address-object address "akamaized_net" "type" "fqdn" "*.akamaized.net" "expire_ttl" "true" / object address-object address "onthemarket_com" "type" "fqdn" "*.onthemarket.com" "expire_ttl" "true" / object address-object address "microsoftapp_net" "type" "fqdn" "*.microsoftapp.net" "expire_ttl" "true" / object address-object address "amazon_co_uk" "type" "fqdn" "*.amazon.co.uk" "expire_ttl" "true" / object address-object address "steampowered_com" "type" "fqdn" "*.steampowered.com" "expire_ttl" "true" / object address-object address "steamserver_net" "type" "fqdn" "*.steamserver.net" "expire_ttl" "true" / object address-object address "steamstatic_com" "type" "fqdn" "*.steamstatic.com" "expire_ttl" "true" / object address-object address "akamaihd_net" "type" "fqdn" "*.akamaihd.net" "expire_ttl" "true" / object address-object address "steamcommunity_com" "type" "fqdn" "*.steamcommunity.com" "expire_ttl" "true" / object address-object address "amazon_com" "type" "fqdn" "*.amazon.com" "expire_ttl" "true" / object address-object address "epicgames_com" "type" "fqdn" "*.epicgames.com" "expire_ttl" "true" / object address-object address "unrealengine_com" "type" "fqdn" "*.unrealengine.com" "expire_ttl" "true" / object address-object address "epicgames_dev" "type" "fqdn" "*.epicgames.dev" "expire_ttl" "true" / object address-object address "fab_com" "type" "fqdn" "*.fab.com" "expire_ttl" "true" / object address-object address "zyxel_com" "type" "fqdn" "*.zyxel.com" "expire_ttl" "true" / object address-object address "msftstatic_com" "type" "fqdn" "*.msftstatic.com" "expire_ttl" "true" / object address-object address "nelreports_net" "type" "fqdn" "*.nelreports.net" "expire_ttl" "true" / object address-object address "yahoo_com" "type" "fqdn" "*.yahoo.com" "expire_ttl" "true" / object address-object address "criteo_com" "type" "fqdn" "*.criteo.com" "expire_ttl" "true" / object address-object address "yimg_com" "type" "fqdn" "*.yimg.com" "expire_ttl" "true" / object address-object address "oath_com" "type" "fqdn" "*.oath.com" "expire_ttl" "true" / object address-object address "doubleclick_net" "type" "fqdn" "*.doubleclick.net" "expire_ttl" "true" / object address-object address "taboola_com" "type" "fqdn" "*.taboola.com" "expire_ttl" "true" / object address-object address "ay_delivery" "type" "fqdn" "*.ay.delivery" "expire_ttl" "true" / object address-object address "fastly_net" "type" "fqdn" "*.fastly.net" "expire_ttl" "true" / object address-object address "clean_gg" "type" "fqdn" "*.clean.gg" "expire_ttl" "true" / object address-object address "pubmatic_com" "type" "fqdn" "*.pubmatic.com" "expire_ttl" "true" / object address-object address "kargo_com" "type" "fqdn" "*.kargo.com" "expire_ttl" "true" / object address-object address "media_net" "type" "fqdn" "*.media.net" "expire_ttl" "true" / object address-object address "yieldmo_com" "type" "fqdn" "*.yieldmo.com" "expire_ttl" "true" / object address-object address "gumgum_com" "type" "fqdn" "*.gumgum.com" "expire_ttl" "true" / object address-object address "adform_net" "type" "fqdn" "*.adform.net" "expire_ttl" "true" / object address-object address "adnxs_com" "type" "fqdn" "*.adnxs.com" "expire_ttl" "true" / object address-object address "zemanta_com" "type" "fqdn" "*.zemanta.com" "expire_ttl" "true" / object address-object address "smartadserver_com" "type" "fqdn" "*.smartadserver.com" "expire_ttl" "true" / object address-object address "openx_net" "type" "fqdn" "*.openx.net" "expire_ttl" "true" / object address-object address "stackadapt_com" "type" "fqdn" "*.stackadapt.com" "expire_ttl" "true" / object address-object address "contextweb_com" "type" "fqdn" "*.contextweb.com" "expire_ttl" "true" / object address-object address "deepintent_com" "type" "fqdn" "*.deepintent.com" "expire_ttl" "true" / object address-object address "ipredictive_com" "type" "fqdn" "*.ipredictive.com" "expire_ttl" "true" / object address-object address "gstatic_com" "type" "fqdn" "*.gstatic.com" "expire_ttl" "true" / object address-object address "adsrvr.org" "type" "fqdn" "*.adsrvr.org" "expire_ttl" "true" / object address-object address "creativecdn_com" "type" "fqdn" "*.creativecdn.com" "expire_ttl" "true" / object address-object address "socdm_com" "type" "fqdn" "*.socdm.com" "expire_ttl" "true" / object address-object address "bidswitch_net" "type" "fqdn" "*.bidswitch.net" "expire_ttl" "true" / object address-object address "rubiconproject_com" "type" "fqdn" "*.rubiconproject.com" "expire_ttl" "true" / object address-object address "criteo_net" "type" "fqdn" "*.criteo.net" "expire_ttl" "true" / object address-object address "admedo_com" "type" "fqdn" "*.admedo.com" "expire_ttl" "true" / object address-object address "googlesyndication_com" "type" "fqdn" "*.googlesyndication.com" "expire_ttl" "true" / object address-object address "_3lift.com" "type" "fqdn" "*.3lift.com" "expire_ttl" "true" / object address-object address "everesttech_net" "type" "fqdn" "*.everesttech.net" "expire_ttl" "true" / object address-object address "lijit_com" "type" "fqdn" "*.lijit.com" "expire_ttl" "true" / object address-object address "dotomi_com" "type" "fqdn" "*.dotomi.com" "expire_ttl" "true" / object address-object address "_1rx_io" "type" "fqdn" "*.1rx.io" "expire_ttl" "true" / object address-object address "dnacdn_net" "type" "fqdn" "*.dnacdn.net" "expire_ttl" "true" / object address-object address "script_ac" "type" "fqdn" "*.script.ac" "expire_ttl" "true" / object address-object address "adnxs-simple_com" "type" "fqdn" "*.adnxs-simple.com" "expire_ttl" "true" / object address-object address "revjet_com" "type" "fqdn" "*.revjet.com" "expire_ttl" "true" / object address-object address "googletagmanager_com" "type" "fqdn" "*.googletagmanager.com" "expire_ttl" "true" / object address-object address "onetrust_com" "type" "fqdn" "*.onetrust.com" "expire_ttl" "true" / object address-object address "msftconnecttest_com" "type" "fqdn" "*.msftconnecttest.com" "expire_ttl" "true" / object address-object address "optimizely_com" "type" "fqdn" "*.optimizely.com" "expire_ttl" "true" / object address-object address "cloudfront_net" "type" "fqdn" "*.cloudfront.net" "expire_ttl" "true" / object address-object address "windows_com" "type" "fqdn" "*.windows.com" "expire_ttl" "true" / object address-object address "virtualearth_net" "type" "fqdn" "*.virtualearth.net" "expire_ttl" "true" / object address-object address "jsdelivr_net" "type" "fqdn" "*.jsdelivr.net" "expire_ttl" "true" / object address-object address "cookie-script_com" "type" "fqdn" "*.cookie-script.com" "expire_ttl" "true" / object address-object address "google-analytics_com" "type" "fqdn" "*.google-analytics.com" "expire_ttl" "true" / object address-object address "youtube_com" "type" "fqdn" "*.youtube.com" "expire_ttl" "true" / object address-object address "amazonaws_com" "type" "fqdn" "*.amazonaws.com" "expire_ttl" "true" / object address-object address "connextra_com" "type" "fqdn" "*.connextra.com" "expire_ttl" "true" / object address-object address "match2one_net" "type" "fqdn" "*.match2one.net" "expire_ttl" "true" / object address-object address "createjs_com" "type" "fqdn" "*.createjs.com" "expire_ttl" "true" / object address-object address "_2mdn_net" "type" "fqdn" "*.2mdn.net" "expire_ttl" "true" / object address-object address "ytimg_com" "type" "fqdn" "*.ytimg.com" "expire_ttl" "true" / object address-object address "betfred_com" "type" "fqdn" "*.betfred.com" "expire_ttl" "true" / object address-object address "ggpht_com" "type" "fqdn" "*.ggpht.com" "expire_ttl" "true" / object address-object address "googlevideo_com" "type" "fqdn" "*.googlevideo.com" "expire_ttl" "true" / object address-object address "grctech_com" "type" "fqdn" "*.grctech.com" "expire_ttl" "true" / object address-object address "adsensecustomsearchads.com" "type" "fqdn" "*.adsensecustomsearchads.com" "expire_ttl" "true" / object address-object address "doubleverify_com" "type" "fqdn" "*.doubleverify.com" "expire_ttl" "true" / object address-object address "v-cdn_net" "type" "fqdn" "*.v-cdn.net" "expire_ttl" "true" / object address-object address "verisign_com" "type" "fqdn" "*.verisign.com" "expire_ttl" "true" / object address-object address "twitch_tv" "type" "fqdn" "*.twitch.tv" "expire_ttl" "true" / object address-object address "jtvnw.net" "type" "fqdn" "*.jtvnw.net" "expire_ttl" "true" / object address-object address "twitchcdn_net" "type" "fqdn" "*.twitchcdn.net" "expire_ttl" "true" / object address-object address "ttvnw_net" "type" "fqdn" "*.ttvnw.net" "expire_ttl" "true" / object address-object address "cdndex_io" "type" "fqdn" "*.cdndex.io" "expire_ttl" "true" / object address-object address "amazon-adsystem_com" "type" "fqdn" "*.amazon-adsystem.com" "expire_ttl" "true" / object address-object address "blerp_com" "type" "fqdn" "*.blerp.com" "expire_ttl" "true" / object address-object address "digitaloceanspaces_com" "type" "fqdn" "*.digitaloceanspaces.com" "expire_ttl" "true" / object address-object address "live-video_net" "type" "fqdn" "*.live-video.net" "expire_ttl" "true" / object address-object address "myzyxel_com" "type" "fqdn" "*.myzyxel.com" "expire_ttl" "true" / object address-object address "fw-cdn_com" "type" "fqdn" "*.fw-cdn.com" "expire_ttl" "true" / object address-object address "crazyegg_com" "type" "fqdn" "*.crazyegg.com" "expire_ttl" "true"
All Replies
-
and now hit the limit which must be like 150 rules? which does not seem a lot?
looking at the manual for FLEX200H I should be able to do 300 Address Objects there no way I'm at 300!Edit….err well turns out I do have 300 just copied the list in Calc and shows 300 would be helpful to add a counter in FLEX H for this0 -
More errors and lockup
0 -
Hi @PeterUK,
May I request the full object list to replicate this issue in my lab? I will send you a message to request it.
err well turns out I do have 300 just copied the list in Calc and shows 300 would be helpful to add a counter in FLEX H for this
You mean the object > address page, is it correct? I will help to raise an idea post after you confirm the page.
Zyxel Melen0 -
Yes address page with counter showing how many one has made would help thanks
1 -
Idea post created
Zyxel Melen0 -
Update for the locked issue:
The issue is more likely related to lots of wildcard address objects, and be fixed in the 1.30 patch 1 weekly firmware. If anyone encounters a similar issue, please send your request to me via community message.
Zyxel Melen0
Categories
- All Categories
- 415 Beta Program
- 2.4K Nebula
- 146 Nebula Ideas
- 96 Nebula Status and Incidents
- 5.7K Security
- 262 USG FLEX H Series
- 271 Security Ideas
- 1.4K Switch
- 74 Switch Ideas
- 1.1K Wireless
- 40 Wireless Ideas
- 6.4K Consumer Product
- 249 Service & License
- 387 News and Release
- 84 Security Advisories
- 29 Education Center
- 10 [Campaign] Zyxel Network Detective
- 3.5K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 85 About Community
- 73 Security Highlight