using *.domain for an alias

along5664

Is it possible to create an alias ex. *.microsoft.com? I am running 26.03.1-RELEASE ,
I tried to add it and got an error saying invalid .

Thanks.

SteveITS

@along5664 It needs to be a resolvable FQDN.

SteveITS

@along5664 also note MS uses multiple IPs which rotate so this may not accomplish your goal. What is your goal?

along5664

@SteveITS
I have several domains , here is an example:
api.todyl.com

status.todyl.com

ws.todyl.com

auth.todyl.com

support.todyl.com

I was hoping to do *.todyl.com to cover all the ones I have to add.
Need to add this to multiple pfsense devices.

Gertjan

@along5664 said in using *.domain for an alias:

Is it possible to create an alias ex. *.microsoft.com?

[Alias Features and Limitations](Alias Features and Limitations).

Read the one and only yellow Warning (who actually) on that page :

See this :

This feature is not useful for controlling access to hostnames for large public websites

as an understatement.
Just don't do that - it will go wrong.

along5664

@Gertjan
Thnx we will add them individually.

johnpoz

@along5664 if you want all of them to point to the same IP you can use a redirection in unbound. But no creating a wildcard alias is not really possible..

You can redirect a whole domain in unbound with an entry like this.

local-zone: "pool.ntp.org" redirect
local-data: "pool.ntp.org 3600 IN A 192.168.3.32"

So anything.anything.whatever.pool.ntp.org gets redirect to the 3.32 address..

dig something.pool.ntp.org +short
192.168.3.32

dig otherthing.something.pool.ntp.org +short
192.168.3.32

dig pool.ntp.org +short
192.168.3.32

I use this because devices on my network using their own ntp pool settings that I can not change - don't really want them asking the pool, when I have a local ntp server running on a pi.

stephenw10

You can add all those fqdns to one alias but they do need to be included separately.

Or you could host a list somewhere and add that as a url alias if you have a large number of firewalls to add it to. That way you can easily add or remove fqdns from the file and it will propagate to all the firewalls.