Allow domain and all subdomains/redirects

Rules
1

Hello,

I want to allow users to blaa.com and any subdomains or redirects that blaa.com sends them to. I don’t want to have to figure out all the subdomains and redirects and add those into my rule sets. Is there a way to allow the connection to blaa.com and then all redirects in the session?

The issue I am having is that users can get to blaa.com, but the web page is not complete because the page redirects to other domains, or pulls data from other domains.

2

Do you mean you have a rule that blocks traffic by default ?

3

Yes, the firewall blocks by default. We have a whitelist for blaa.com, but it breaks because the other domains and redirects from blaa.com are not in the whitelist.

4

What is your Suricata rule for this white list ?