Wildcard Domains / TLDs in Firewall-Rules (and perhaps groups)
Open, WishlistPublicFEATURE REQUEST
Actions

Assigned To

None

Authored By

	aga
	Jun 15 2023, 5:04 PM

Description

It would be very helpful to be able to use whole Domains / TLDs (Wildcards).
A specific use-case would be, to block the new .ZIP- and .MOV-Domains for example.

For example:

set firewall name LAN-WAN rule 10 destination fqdn '*.zip'
set firewall name LAN-WAN rule 10 action drop

Example in groups:

set firewall group domain-group Malicious-Domains address '*.zip'

Details

Version: -
Is it a breaking change?: Unspecified (possibly destroys the router)

Event Timeline

aga created this task.Jun 15 2023, 5:04 PM

This would have to be handled with DNS and not in the firewall. Hostnames work on firewall because they are resolved prior to use in rules.

pasik subscribed.Jun 15 2023, 9:05 PM

eronlloyd subscribed.Jul 11 2023, 1:01 AM

dmbaturin triaged this task as Wishlist priority.Jan 11 2024, 11:29 AM

dmbaturin added a project: VyOS 1.5 Circinus.

dmbaturin removed a project: VyOS 1.4 Sagitta.Apr 12 2024, 1:59 PM

syncer edited projects, added VyOS Rolling; removed VyOS 1.5 Circinus.Oct 30 2024, 3:24 PM

syncer moved this task from Need Triage to Backlog - Feature Requests on the VyOS Rolling board.

hsw0 subscribed.Jul 10 2025, 12:22 PM

Wildcard Domains / TLDs in Firewall-Rules (and perhaps groups)Open, WishlistPublicFEATURE REQUESTActions

Description

Details

Event Timeline

Wildcard Domains / TLDs in Firewall-Rules (and perhaps groups)
Open, WishlistPublicFEATURE REQUEST
Actions