Big FQDN list cause UI and FLEX H lockup

Options
PeterUK
PeterUK Posts: 4,541 image  Guru Member
250 Answers 2500 Comments Friend Collector Eighth Anniversary
edited October 2024 in USG FLEX H Series

FLEX 200H 1.30(ABWV.0)

So I have a group (one big one with 2 in) of FQDN and its causing a lockup here is the list I also have a big list of SMTP address ranges

This is a Error after a reboot

Screenshot 2024-10-27 011108.png
/ object address-object address "office_com" "type" "fqdn" "*.office.com" "expire_ttl" "true"
/ object address-object address "microsoft_com" "type" "fqdn" "*.microsoft.com" "expire_ttl" "true"
/ object address-object address "office365_com" "type" "fqdn" "*.office365.com" "expire_ttl" "true"
/ object address-object address "bing_com" "type" "fqdn" "*.bing.com" "expire_ttl" "true"
/ object address-object address "trafficmanager_net" "type" "fqdn" "*.trafficmanager.net" "expire_ttl" "true"
/ object address-object address "windowsupdate_com" "type" "fqdn" "*.windowsupdate.com" "expire_ttl" "true"
/ object address-object address "thunderbird_net" "type" "fqdn" "*.thunderbird.net" "expire_ttl" "true"
/ object address-object address "gmail_com" "type" "fqdn" "*.gmail.com" "expire_ttl" "true"
/ object address-object address "msedge_net" "type" "fqdn" "*.msedge.net" "expire_ttl" "true"
/ object address-object address "pki_goog" "type" "fqdn" "*.pki.goog" "expire_ttl" "true"
/ object address-object address "google_com" "type" "fqdn" "*.google.com" "expire_ttl" "true"
/ object address-object address "googleapis_com" "type" "fqdn" "*.googleapis.com" "expire_ttl" "true"
/ object address-object address "blueyonder_co_uk" "type" "fqdn" "*.blueyonder.co.uk" "expire_ttl" "true"
/ object address-object address "globalsign_com" "type" "fqdn" "*.globalsign.com" "expire_ttl" "true"
/ object address-object address "cloudflare_net" "type" "fqdn" "*.cloudflare.net" "expire_ttl" "true"
/ object address-object address "virginmedia_com" "type" "fqdn" "*.virginmedia.com" "expire_ttl" "true"
/ object address-object address "microsoftonline_com" "type" "fqdn" "*.microsoftonline.com" "expire_ttl" "true"
/ object address-object address "akadns_net" "type" "fqdn" "*.akadns.net" "expire_ttl" "true"
/ object address-object address "gamepass_com" "type" "fqdn" "*.gamepass.com" "expire_ttl" "true"
/ object address-object address "azureedge_net" "type" "fqdn" "*.azureedge.net" "expire_ttl" "true"
/ object address-object address "linkedin_com" "type" "fqdn" "*.linkedin.com" "expire_ttl" "true"
/ object address-object address "live_com" "type" "fqdn" "*.live.com" "expire_ttl" "true"
/ object address-object address "bingapis_com" "type" "fqdn" "*.bingapis.com" "expire_ttl" "true"
/ object address-object address "msn_com" "type" "fqdn" "*.msn.com" "expire_ttl" "true"
/ object address-object address "scorecardresearch_com" "type" "fqdn" "*.scorecardresearch.com" "expire_ttl" "true"
/ object address-object address "akamaized_net" "type" "fqdn" "*.akamaized.net" "expire_ttl" "true"
/ object address-object address "onthemarket_com" "type" "fqdn" "*.onthemarket.com" "expire_ttl" "true"
/ object address-object address "microsoftapp_net" "type" "fqdn" "*.microsoftapp.net" "expire_ttl" "true"
/ object address-object address "amazon_co_uk" "type" "fqdn" "*.amazon.co.uk" "expire_ttl" "true"
/ object address-object address "steampowered_com" "type" "fqdn" "*.steampowered.com" "expire_ttl" "true"
/ object address-object address "steamserver_net" "type" "fqdn" "*.steamserver.net" "expire_ttl" "true"
/ object address-object address "steamstatic_com" "type" "fqdn" "*.steamstatic.com" "expire_ttl" "true"
/ object address-object address "akamaihd_net" "type" "fqdn" "*.akamaihd.net" "expire_ttl" "true"
/ object address-object address "steamcommunity_com" "type" "fqdn" "*.steamcommunity.com" "expire_ttl" "true"
/ object address-object address "amazon_com" "type" "fqdn" "*.amazon.com" "expire_ttl" "true"
/ object address-object address "epicgames_com" "type" "fqdn" "*.epicgames.com" "expire_ttl" "true"
/ object address-object address "unrealengine_com" "type" "fqdn" "*.unrealengine.com" "expire_ttl" "true"
/ object address-object address "epicgames_dev" "type" "fqdn" "*.epicgames.dev" "expire_ttl" "true"
/ object address-object address "fab_com" "type" "fqdn" "*.fab.com" "expire_ttl" "true"
/ object address-object address "zyxel_com" "type" "fqdn" "*.zyxel.com" "expire_ttl" "true"
/ object address-object address "msftstatic_com" "type" "fqdn" "*.msftstatic.com" "expire_ttl" "true"
/ object address-object address "nelreports_net" "type" "fqdn" "*.nelreports.net" "expire_ttl" "true"
/ object address-object address "yahoo_com" "type" "fqdn" "*.yahoo.com" "expire_ttl" "true"
/ object address-object address "criteo_com" "type" "fqdn" "*.criteo.com" "expire_ttl" "true"
/ object address-object address "yimg_com" "type" "fqdn" "*.yimg.com" "expire_ttl" "true"
/ object address-object address "oath_com" "type" "fqdn" "*.oath.com" "expire_ttl" "true"
/ object address-object address "doubleclick_net" "type" "fqdn" "*.doubleclick.net" "expire_ttl" "true"
/ object address-object address "taboola_com" "type" "fqdn" "*.taboola.com" "expire_ttl" "true"
/ object address-object address "ay_delivery" "type" "fqdn" "*.ay.delivery" "expire_ttl" "true"
/ object address-object address "fastly_net" "type" "fqdn" "*.fastly.net" "expire_ttl" "true"
/ object address-object address "clean_gg" "type" "fqdn" "*.clean.gg" "expire_ttl" "true"
/ object address-object address "pubmatic_com" "type" "fqdn" "*.pubmatic.com" "expire_ttl" "true"
/ object address-object address "kargo_com" "type" "fqdn" "*.kargo.com" "expire_ttl" "true"
/ object address-object address "media_net" "type" "fqdn" "*.media.net" "expire_ttl" "true"
/ object address-object address "yieldmo_com" "type" "fqdn" "*.yieldmo.com" "expire_ttl" "true"
/ object address-object address "gumgum_com" "type" "fqdn" "*.gumgum.com" "expire_ttl" "true"
/ object address-object address "adform_net" "type" "fqdn" "*.adform.net" "expire_ttl" "true"
/ object address-object address "adnxs_com" "type" "fqdn" "*.adnxs.com" "expire_ttl" "true"
/ object address-object address "zemanta_com" "type" "fqdn" "*.zemanta.com" "expire_ttl" "true"
/ object address-object address "smartadserver_com" "type" "fqdn" "*.smartadserver.com" "expire_ttl" "true"
/ object address-object address "openx_net" "type" "fqdn" "*.openx.net" "expire_ttl" "true"
/ object address-object address "stackadapt_com" "type" "fqdn" "*.stackadapt.com" "expire_ttl" "true"
/ object address-object address "contextweb_com" "type" "fqdn" "*.contextweb.com" "expire_ttl" "true"
/ object address-object address "deepintent_com" "type" "fqdn" "*.deepintent.com" "expire_ttl" "true"
/ object address-object address "ipredictive_com" "type" "fqdn" "*.ipredictive.com" "expire_ttl" "true"
/ object address-object address "gstatic_com" "type" "fqdn" "*.gstatic.com" "expire_ttl" "true"
/ object address-object address "adsrvr.org" "type" "fqdn" "*.adsrvr.org" "expire_ttl" "true"
/ object address-object address "creativecdn_com" "type" "fqdn" "*.creativecdn.com" "expire_ttl" "true"
/ object address-object address "socdm_com" "type" "fqdn" "*.socdm.com" "expire_ttl" "true"
/ object address-object address "bidswitch_net" "type" "fqdn" "*.bidswitch.net" "expire_ttl" "true"
/ object address-object address "rubiconproject_com" "type" "fqdn" "*.rubiconproject.com" "expire_ttl" "true"
/ object address-object address "criteo_net" "type" "fqdn" "*.criteo.net" "expire_ttl" "true"
/ object address-object address "admedo_com" "type" "fqdn" "*.admedo.com" "expire_ttl" "true"
/ object address-object address "googlesyndication_com" "type" "fqdn" "*.googlesyndication.com" "expire_ttl" "true"
/ object address-object address "_3lift.com" "type" "fqdn" "*.3lift.com" "expire_ttl" "true"
/ object address-object address "everesttech_net" "type" "fqdn" "*.everesttech.net" "expire_ttl" "true"
/ object address-object address "lijit_com" "type" "fqdn" "*.lijit.com" "expire_ttl" "true"
/ object address-object address "dotomi_com" "type" "fqdn" "*.dotomi.com" "expire_ttl" "true"
/ object address-object address "_1rx_io" "type" "fqdn" "*.1rx.io" "expire_ttl" "true"
/ object address-object address "dnacdn_net" "type" "fqdn" "*.dnacdn.net" "expire_ttl" "true"
/ object address-object address "script_ac" "type" "fqdn" "*.script.ac" "expire_ttl" "true"
/ object address-object address "adnxs-simple_com" "type" "fqdn" "*.adnxs-simple.com" "expire_ttl" "true"
/ object address-object address "revjet_com" "type" "fqdn" "*.revjet.com" "expire_ttl" "true"
/ object address-object address "googletagmanager_com" "type" "fqdn" "*.googletagmanager.com" "expire_ttl" "true"
/ object address-object address "onetrust_com" "type" "fqdn" "*.onetrust.com" "expire_ttl" "true"
/ object address-object address "msftconnecttest_com" "type" "fqdn" "*.msftconnecttest.com" "expire_ttl" "true"
/ object address-object address "optimizely_com" "type" "fqdn" "*.optimizely.com" "expire_ttl" "true"
/ object address-object address "cloudfront_net" "type" "fqdn" "*.cloudfront.net" "expire_ttl" "true"
/ object address-object address "windows_com" "type" "fqdn" "*.windows.com" "expire_ttl" "true"
/ object address-object address "virtualearth_net" "type" "fqdn" "*.virtualearth.net" "expire_ttl" "true"
/ object address-object address "jsdelivr_net" "type" "fqdn" "*.jsdelivr.net" "expire_ttl" "true"
/ object address-object address "cookie-script_com" "type" "fqdn" "*.cookie-script.com" "expire_ttl" "true"
/ object address-object address "google-analytics_com" "type" "fqdn" "*.google-analytics.com" "expire_ttl" "true"
/ object address-object address "youtube_com" "type" "fqdn" "*.youtube.com" "expire_ttl" "true"
/ object address-object address "amazonaws_com" "type" "fqdn" "*.amazonaws.com" "expire_ttl" "true"
/ object address-object address "connextra_com" "type" "fqdn" "*.connextra.com" "expire_ttl" "true"
/ object address-object address "match2one_net" "type" "fqdn" "*.match2one.net" "expire_ttl" "true"
/ object address-object address "createjs_com" "type" "fqdn" "*.createjs.com" "expire_ttl" "true"
/ object address-object address "_2mdn_net" "type" "fqdn" "*.2mdn.net" "expire_ttl" "true"
/ object address-object address "ytimg_com" "type" "fqdn" "*.ytimg.com" "expire_ttl" "true"
/ object address-object address "betfred_com" "type" "fqdn" "*.betfred.com" "expire_ttl" "true"
/ object address-object address "ggpht_com" "type" "fqdn" "*.ggpht.com" "expire_ttl" "true"
/ object address-object address "googlevideo_com" "type" "fqdn" "*.googlevideo.com" "expire_ttl" "true"
/ object address-object address "grctech_com" "type" "fqdn" "*.grctech.com" "expire_ttl" "true"
/ object address-object address "adsensecustomsearchads.com" "type" "fqdn" "*.adsensecustomsearchads.com" "expire_ttl" "true"
/ object address-object address "doubleverify_com" "type" "fqdn" "*.doubleverify.com" "expire_ttl" "true"
/ object address-object address "v-cdn_net" "type" "fqdn" "*.v-cdn.net" "expire_ttl" "true"
/ object address-object address "verisign_com" "type" "fqdn" "*.verisign.com" "expire_ttl" "true"
/ object address-object address "twitch_tv" "type" "fqdn" "*.twitch.tv" "expire_ttl" "true"
/ object address-object address "jtvnw.net" "type" "fqdn" "*.jtvnw.net" "expire_ttl" "true"
/ object address-object address "twitchcdn_net" "type" "fqdn" "*.twitchcdn.net" "expire_ttl" "true"
/ object address-object address "ttvnw_net" "type" "fqdn" "*.ttvnw.net" "expire_ttl" "true"
/ object address-object address "cdndex_io" "type" "fqdn" "*.cdndex.io" "expire_ttl" "true"
/ object address-object address "amazon-adsystem_com" "type" "fqdn" "*.amazon-adsystem.com" "expire_ttl" "true"
/ object address-object address "blerp_com" "type" "fqdn" "*.blerp.com" "expire_ttl" "true"
/ object address-object address "digitaloceanspaces_com" "type" "fqdn" "*.digitaloceanspaces.com" "expire_ttl" "true"
/ object address-object address "live-video_net" "type" "fqdn" "*.live-video.net" "expire_ttl" "true"
/ object address-object address "myzyxel_com" "type" "fqdn" "*.myzyxel.com" "expire_ttl" "true"
/ object address-object address "fw-cdn_com" "type" "fqdn" "*.fw-cdn.com" "expire_ttl" "true"
/ object address-object address "crazyegg_com" "type" "fqdn" "*.crazyegg.com" "expire_ttl" "true"

All Replies

  • PeterUK
    PeterUK Posts: 4,541 image  Guru Member
    250 Answers 2500 Comments Friend Collector Eighth Anniversary
    edited October 2024
    Options

    and now hit the limit which must be like 150 rules? which does not seem a lot?

    Screenshot 2024-10-27 013246.png

    looking at the manual for FLEX200H I should be able to do 300 Address Objects there no way I'm at 300! Edit….err well turns out I do have 300 just copied the list in Calc and shows 300 would be helpful to add a counter in FLEX H for this

  • PeterUK
    PeterUK Posts: 4,541 image  Guru Member
    250 Answers 2500 Comments Friend Collector Eighth Anniversary
    Options

    More errors and lockup

    Screenshot 2024-10-27 032133.png
  • Zyxel_Melen
    Zyxel_Melen Posts: 4,890 image  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate
    Options

    Hi @PeterUK,

    May I request the full object list to replicate this issue in my lab? I will send you a message to request it.

    err well turns out I do have 300 just copied the list in Calc and shows 300 would be helpful to add a counter in FLEX H for this

    You mean the object > address page, is it correct? I will help to raise an idea post after you confirm the page.

    Zyxel Melen


  • PeterUK
    PeterUK Posts: 4,541 image  Guru Member
    250 Answers 2500 Comments Friend Collector Eighth Anniversary
    Options

    Yes address page with counter showing how many one has made would help thanks

  • Zyxel_Melen
    Zyxel_Melen Posts: 4,890 image  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate
    Options

    Update for the locked issue:

    The issue is more likely related to lots of wildcard address objects, and be fixed in the 1.30 patch 1 weekly firmware. If anyone encounters a similar issue, please send your request to me via community message.

    Zyxel Melen