The web page bug for full wildcard FQDN support

PeterUK

So I just pinpointed the bug for this

Support FQDN wildcard for both root domain and subdomains on USG FLEX H — Zyxel Community

The issue is not the firmware (well maybe?) to support it but the web page not letting you.

So you can't do this

*grc.com because it say "Invalid wildcard FQDN address." you have to do *.grc.com but you can do *ionos.co.uk !

the issue is the number of dots!

Zyxel_Judy

Hi @PeterUK ,

Checked this against the current uOS firewall FQDN validation logic. It's actually working as designed, not a bug — only one wildcard and after removing the label containing the wildcard, the remaining domain part must have at least 2 sectors.

That's why:

• *.grc.com and *ionos.co.uk are both accepted → remaining part grc.com and yahoo.com = 2 sectors
• *.com and *grc.com are both rejected → remaining part com = 1 sector

PeterUK

hi

I don't think that right Judy

because now *ionos.co.uk mean I can do

ionos.co.uk

www.ionos.co.uk

developer.hosting.ionos.co.uk

where as *.ionos.co.uk can only do

www.ionos.co.uk

developer.hosting.ionos.co.uk

Just like *.grc.com only the UI will not let me do *grc.com but will let me do *ionos.co.uk

Zyxel_Judy

Hi @PeterUK ,

As a workaround, we'd recommend creating two separate objects — the subdomain wildcard (*.grc.com) and the root domain (grc.com) — to ensure both are covered. We understand this uses up two address objects instead of one.
We'll pass this feedback along and evaluate the request for supporting a single wildcard object to cover both.

PeterUK

thanks yes that what I doing but it very annoying to do.