Network Definition - Bug or by design?

By design.  If you use just tk, you will block name resolution for all .tk domains.  See Block a TLD.

Cheers - Bob

Bob, 

Did you post your answer to the wrong discussion, lol? I don't see how your answer applies here.

My question is about why adding a root domain (SLD.TLD) to a Sophos Network Definition acts like a wildcard.

Thanks, 

Jeff

Hey Jeff,

Good question - I didn't explain well, did I?!?

I was just showing that this behavior is "by design."  Just as domain.tld will prevent the separate resolution of sub.domain.tld, tld will prevent the separate resolution of domain.tld.

Cheers - Bob

Thank you for the clarification. That's what I thought.

So what is the workaround if you want "domain.tld" to point to one local IP address and "sub.domain.tld" to point to another IP address (local or external)? I have a small network so adding a local DNS server seems overkill.

Thanks again!

Not possible.  The only workaround is a separate subdomain instead of domain.tld.

Cheers - Bob

BAlfson said:

Not possible. The only workaround is a separate subdomain instead of domain.tld.

Cheers - Bob

Sorry Bob but I'm not following your logic.

"sub.domain.tld" is a separate subdomain.

You can use sub1.domain.tld and sub2.domain.tld.  You cannot use sub.domain.tld and domain.tld.

Is that clearer?

Cheers - Bob

You can use sub1.domain.tld and sub2.domain.tld.  You cannot use sub.domain.tld and domain.tld.

Is that clearer?

Cheers - Bob