Skip to main content
BlueMouse
New Member
August 31, 2018
Question

Subdomains issue - Trying to limit to specific but all work

  • August 31, 2018
  • 2 replies
  • 5264 views

Hi,

We are trying to limit access to a specific sub domain by specifically whitelisting it via FQDN, as we might want to allow other sub domains at a later date. However all sub domains are being allowed through. For example:

 

Allowed:

hat.somedomain.com

 

However all sub domains such as:

coat.somedomain.com

scarf.somedomain.com

Still work.

 

All sub domains share the same IP address, and I have been advised that this might be the problem. Is this normal behavior? This is an initial sanity check to make sure I am not missing a fundamental.

 

Thanks

 

Paul

    2 replies

    rwpatterson
    New Member
    August 31, 2018

    Welcome to the forums.

     

    Have you tried using regular expressions to craft the name?

     

    ^hat.somedomain.com$

     

    That forces it to start with 'hat', and end with '.com'. Removing the trailing dollar sign will allow it to end with anything.

    BlueMouse
    BlueMouseAuthor
    New Member
    September 10, 2018

    Hi,

     

    Thank you for the suggestion and happy to be here :) ^ cannot be used with FQDN. One of my guys says there is nothing that can be done with this because all subdomains resolve to the same IP address.

     

    At the end of the day all I want to do is allow access to hat.somedomain.com but block access to all other subdomains.

     

    Any other suggestions on the best approach? Happy to explore outside of FQDN?

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.