Maybe someone can explain if I am doing something wrong or this is an issue with the Walled Garden feature. Our company wants to allow http://www.state.nj.us/ through the Walled Garden. Like most of my sites I use the following scheme -> *.domain.com

So we used -> *.nj.us
Then we tried adding the FQDN in /ip/walled-garden ip -> www.state.nj.us

Neither allowed access and would take the user to the default Mikrotik Login/Bypass page. Here is the interesting part. After some playing around I did find 2 ways to get this done -

1. *nj.us (notice the missing . at the front like previous)
2. *.*.nj.us (I knew this should work but is more restrictive than *.nj.us, in theory)

Can anyone shed some light on this? I have this issue with multiple sites and it's frustrating that *.domain.com doesn't work as described in the RouterOS handbook.

It makes sense depending on how you look at it I guess. I wouldnt say it is a bug, but I wouldnt say the feature is working exactly right, either. It looks like it is looking at each domain component individually. I wonder what .*.domain.com would do... I dunno if it is supposed to behave like a normal regex or not.