Gateway blocking ALL .com.au and .net.au TLDs

[stores]

Without me changing anything, a gateway firewall policy that has operated without issue for years has started blocking ALL .com.au and .net.au TLDs. The policy has a single rule that blocks all categories under “security risks”.

Being on the free plan I don’t have access to support, which is fine, but where do I report a major false positive issue like this one?

[Cyb3r-Jak3]

Thanks for the report. This has been escalated.

[mianmian]

Hello, Can you provide a few example domains with .com.au and .net.au TLDs that are categorizd incorrectly? You can use this link to check the categorization https://radar.cloudflare.com/domains/feedback/domain.com.au

[ilyaa]

Hello,
Starting yesterday, the gateway firewall policy blocks all “co.il” and “net.il” TLDs.by default if “All security risks” is chosen in the security categories.

All domains I tried under those TLDs are correctly categorized using Cloudflare radar

I have to explicitly allowlist “co.il” TLD to get access back:

[domjh]

Can you post some example domains you were having this issue with?

[erisa-cf]

Hi @ilyaa thanks for reporting this, we are currently looking into these issues.

It would help us a lot if you could supply example domains that you are seeing affected, as mentioned by @domjh

[ilyaa]

All domains under co.il are blocked - ynet.co.il, walla.co.il, geotours.co.il…

[erisa-cf]

Thank you @ilyaa, we are investigating and this helps.

[ilyaa]

If it helps for your investigation - all DNS requests to co.il TLD get “ABANDONED” response from Cloudflare

[erisa-cf]

Thanks @ilyaa this information helped us narrow down the issue further and it has been escalated to our engineering team. In the meantime we recommend customers add an Allow policy for the TLD.

[james.stewart]

Good evening,

There seems to be a major issue here as this is affecting both zero trust and 1.1.1.2

Any Australian domains are blocked including examples such as google.com.au , abc.net.au, whirlpool.net.au etc

[james.stewart]

Result when trying to do a name server resolution against google.com.au

[james.stewart]

.com.au and .net.au domains are also being blocked including google.com.au

Tried both zero trust and 1.1.1.2 and both returning the same result

[erisa-cf]

Hi all,

We have raised an incident for this, which you can track here:

Cloudflare Zero Trust: Gateway Issues

Thank you for the reports!

[james.stewart]

Thank you for your prompt support in getting this resolved

[james.stewart]

Working again! thank you!

[ilyaa]

Works also for .il domains. Thanks!