Blocking an entire TLD

[Michael234]

As per this article

Omitting the “o” in .com Could Be Costly – Krebs on Security

is it possible to block all .cm domains?

This item notes that *.cm not supported for Local DNS records

Question on Local DNS records feature

Hi Michael, Local DNS records, outgoing firewall rules and web blocking are three different feature for the device. Local DNS records is just simple entry records that you can use for local/LAN server resolve from domain name to IP address. Some users may defined the local DNS records for public server that doesn’t register with public domain name. For server registered with public domain name, usually we won’t add the record here instead if we let the forwarding DNS service send the request t…

Is there another approach? Thank you

[mldowling]

Hello @Michael234,
Is this what you are also referring to

.cm | Reputation

Have you attempted to use the Content Filtering feature of the routers to accomplish this ?
Happy to Help,
Marcus

[Michael234]

Bingo! Thanks Marcus.
Entering “cm” worked. I also tried “*.cm” and “.cm” but those were rejected the web interface as invalid.
This is GREAT.

[mldowling]

Hello @Michael234,
Glad that worked, let us know in a week or so how it goes, we may implement this for many of our clients too.
Happy to Help,
Marcus

[Michael234]

Marcus
Here are screen shots from before and after when trying to get at chase[dot]cm
https://twitter.com/defensivecomput/status/980913607167954944