DNS address-book does not support wildcard configuration.

For example, the address baidu.com has multiple sub-domains. All sub domains under baidu.com cannot be included using one address entry. Every sub-domain must be configured separately as an individual address book entry.

While configuring DNS name address book entries, the device returns the following error:

root#set security zones security-zone untrust address-book address baidu1 dns-name *.baidu.com 
error: domain-name: '*.baidu.com': Must be a valid DNS name 
error: statement creation failed: dns-name 

Wildcard entries are not acceptable when configuring DNS name address book entries.

Every sub-domain must be configured separately as an individual address book entry as illustrated in the following example configuration:

set security zones security-zone Untrust address-book address baidu dns-name www.baidu.com 
set security zones security-zone Untrust address-book address baidu-mail dns-name mail.baidu.com 
set security zones security-zone Untrust address-book address baidu-chat dns-name chat.baidu.com 

12/04/2024 --- Added whether or not this still applies.

This behavior is still present as of 24.2R1.