Without me changing anything, a gateway firewall policy that has operated without issue for years has started blocking ALL .com.au and .net.au TLDs. The policy has a single rule that blocks all categories under “security risks”.
Being on the free plan I don’t have access to support, which is fine, but where do I report a major false positive issue like this one?
Thanks for the report. This has been escalated.
Hello, Can you provide a few example domains with .com.au and .net.au TLDs that are categorizd incorrectly? You can use this link to check the categorization https://radar.cloudflare.com/domains/feedback/domain.com.au
Starting yesterday, the gateway firewall policy blocks all “co.il” and “net.il” TLDs.by default if “All security risks” is chosen in the security categories.
All domains I tried under those TLDs are correctly categorized using Cloudflare radar
I have to explicitly allowlist “co.il” TLD to get access back:
Can you post some example domains you were having this issue with?
Hi @ilyaa thanks for reporting this, we are currently looking into these issues.
It would help us a lot if you could supply example domains that you are seeing affected, as mentioned by @domjh
All domains under co.il are blocked - ynet.co.il, walla.co.il, geotours.co.il…
Thank you @ilyaa, we are investigating and this helps.
If it helps for your investigation - all DNS requests to co.il TLD get “ABANDONED” response from Cloudflare
Thanks @ilyaa this information helped us narrow down the issue further and it has been escalated to our engineering team. In the meantime we recommend customers add an Allow policy for the TLD.
There seems to be a major issue here as this is affecting both zero trust and 126.96.36.199
Any Australian domains are blocked including examples such as google.com.au , abc.net.au, whirlpool.net.au etc
Result when trying to do a name server resolution against google.com.au
.com.au and .net.au domains are also being blocked including google.com.au
Tried both zero trust and 188.8.131.52 and both returning the same result
We have raised an incident for this, which you can track here:
Thank you for the reports!
Thank you for your prompt support in getting this resolved
Working again! thank you!
Works also for .il domains. Thanks!
This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.