topic Re: Blocking Multiple domain using script on R81.10 in General Topics

Blocking Multiple domain using script on R81.10

ArsathParves1 — Wed, 11 Oct 2023 16:00:00 GMT

Hi Checkmates,

Is there a method to efficiently block a large number of domains, such as 1000 or more, using a script in the R81.10 environment? Currently, within our network, we have access policies to block domains and we maintain a network object group where we typically list domain FQDN which we wanted to block. However, we recently received a request to block over 1000 domains, and we're looking for a way to add them in bulk to our existing network object group. Is there a script or method available for this scenario?

#6200 #R81.10

Re: Blocking Multiple domain using script on R81.10

PhoneBoy — Wed, 11 Oct 2023 17:09:59 GMT

You might find it easier to upgrade to R81.20 and put all the domains in a Network Feed.
This will allow you to maintain this block list without having to manipulate objects in a group or pushing policy.

Having said that, you can script this with something like the following two commands and some looping:

mgmt_cli -s sid.txt add dns-domain name ".example.com" is-sub-domain false
mgmt_cli -s sid.txt set group name "MyGroup" members.add ".example.com"

A publish action every 100 or so iterations is recommended.