Something odd with having a bridgemode domain on old USG V4.73(AAKY.2)

Options
PeterUK
PeterUK image  Guru Member
250 Answers 2500 Comments Friend Collector Eighth Anniversary
in Security

So on my USG60 is my backup DNS that does recursion lookups no forwarders needed.

I did know that for some reason CloudFlare has bridgemode.com and bridgemode.net but not bridgemode.network or bridgemode.co.uk which are now mine.

But if I do a lookup to USG60 for bridgemode.network or bridgemode.co.uk I get
Header:
ID=1, QR=Response, Opcode=QUERY, RCODE=NO ERROR
AuthoritativeAnswer=Yes, Truncation=No
Recursion Desired=Yes, Recursion Available=Yes
QDCOUNT=1, ANCOUNT=0, NSCOUNT=1, ARCOUNT=0

Question:
Name=bridgemode.co.uk, QTYPE=A, QCLASS=INET

Authority Records Section:

  • Name=co.uk
    Type=SOA, Class=INET, TTL=10800( 3 Hours), RDLENGTH=29
    Name Server=co.uk, Mailbox=root.co.uk
    Serial=2026081314
    Refresh=10800( 3 Hours)
    Retry=54000( 15 Hours)
    Expire=259200(3 Days)
    Minimum TTL=10800( 3 Hours)

Header:
ID=1, QR=Response, Opcode=QUERY, RCODE=NO ERROR
AuthoritativeAnswer=Yes, Truncation=No
Recursion Desired=Yes, Recursion Available=Yes
QDCOUNT=1, ANCOUNT=0, NSCOUNT=1, ARCOUNT=0

Question:
Name=bridgemode.network, QTYPE=A, QCLASS=INET

Authority Records Section:

  • Name=bridgemode.network
    Type=SOA, Class=INET, TTL=10800( 3 Hours), RDLENGTH=29
    Name Server=bridgemode.network, Mailbox=root.bridgemode.network
    Serial=2026081314
    Refresh=10800( 3 Hours)
    Retry=54000( 15 Hours)
    Expire=259200(3 Days)
    Minimum TTL=10800( 3 Hours)

yet any other lookup works fine and if I do the lookup for bridgemode.network or bridgemode.co.uk to like 8.8.8.8 or 1.1.1.1 I get a IP

so it seems like the old USG V4.73(AAKY.2) has some hard coded lookup to do with CloudFlare? I did the same test on FLEX H and got the IP's correct

All Replies

  • Zyxel_Tina
    Zyxel_Tina image  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Switch 100 Answers 500 Comments
    Options

    Hi @PeterUK,

    Please note that USG60 is already in EoL status. This means the firmware is stable but no longer actively enhanced, and our support scope is limited if unexpected issues appear. For long-term use and better security coverage, we recommend considering our current firewall models listed on our website.

    Next-Gen Firewall | Zyxel Networks

    Additionally, after checking with our team, we confirmed that the USG60 did not support the Cloudflare feature at the time, which means there would be no hard-coded behavior associated with it.

    Zyxel Tina

  • PeterUK
    PeterUK image  Guru Member
    250 Answers 2500 Comments Friend Collector Eighth Anniversary
    Options

    Yes I get its EOL but why can I not do nslookup for bridgemode.network or bridgemode.co.uk that should give back a IP but it don't? thats whats really odd about it

  • Zyxel_Tina
    Zyxel_Tina image  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Switch 100 Answers 500 Comments
    Options

    Hi @PeterUK,

    Thank you for your feedback.

    As mentioned previously, since this model has reached EoL, our support is limited. At this stage, we recommend checking the following three settings to see if any of them could be contributing to the issue:

    • WAN DNS
    • DNS zone forwarder
    • Address record

    Thank you for your understanding!

    Zyxel Tina

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）