The web page bug for full wildcard FQDN support

Options
PeterUK
PeterUK Posts: 4,608 image  Guru Member
250 Answers 2500 Comments Friend Collector Eighth Anniversary
edited August 3 in USG FLEX H Series

So I just pinpointed the bug for this

Support FQDN wildcard for both root domain and subdomains on USG FLEX H — Zyxel Community

The issue is not the firmware (well maybe?) to support it but the web page not letting you.

So you can't do this

*grc.com because it say "Invalid wildcard FQDN address." you have to do *.grc.com but you can do *ionos.co.uk !

the issue is the number of dots!

All Replies

  • Zyxel_Judy
    Zyxel_Judy Posts: 2,629 image  Zyxel Employee
    Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 2 - Security Zyxel Certified Network Engineer Level 1 - Nebula
    Options

    Hi @PeterUK ,

    Checked this against the current uOS firewall FQDN validation logic. It's actually working as designed, not a bug — only one wildcard and after removing the label containing the wildcard, the remaining domain part must have at least 2 sectors.

    That's why:

    • *.grc.com and *ionos.co.uk are both accepted → remaining part grc.com and yahoo.com = 2 sectors
    • *.com and *grc.com are both rejected → remaining part com = 1 sector

    Zyxel_Judy

  • PeterUK
    PeterUK Posts: 4,608 image  Guru Member
    250 Answers 2500 Comments Friend Collector Eighth Anniversary
    edited August 7
    Options

    hi

    I don't think that right Judy

    because now *ionos.co.uk mean I can do

    ionos.co.uk

    www.ionos.co.uk

    developer.hosting.ionos.co.uk

    where as *.ionos.co.uk can only do

    www.ionos.co.uk

    developer.hosting.ionos.co.uk

    Just like *.grc.com only the UI will not let me do *grc.com but will let me do *ionos.co.uk