Domain Object Not working

[murawai]

Hi All
I am trying to create a domain obect for public sites such as CNN.com however I can't get any hits against the rule in my rulebase (when its right at the top). My firewall module and the management module both appear to be resolving domain names correctly, ie I can do a dig cnn.com successfully from the firewall module and my management console also can resolve correctly. Why don't the domain objects get a match?
Thanks
W

[chillyjim]

Domain objects work OK for inbound traffic i've found but outbound not so good. If you look at a http://cnn.com page load, you'll see that most of it comes from cnn.net. Things like this will mess up domain objects.

[murawai]

It still doesn't seem to work even for sites that only have a single hostname with single IP addresses. It is outbound that I am trying to match on however.