USG40W - When entering a website (www.idrive.com) I get redirected to the firewall login

laltobelli

Hi,

When trying to access the website www.idrive.com on any PC on the network the page gets redirected to the login screen for the USG40W. We found this issue when trying to get Cloud Replication (Backup) working on the iDrive BMR device. THe site *.idrive.com is listed as a Trusted website in the Content Filter.

Larry

laltobelli

The problem had to do with a port forwarding rule I put in. Disabling the rule allowed the website to open.

PeterUK

what does this show?

nslookup www.idrive.com

laltobelli

Server: localhost

Address: 127.9.0.1

Non-authoritative answer:

Name: www.idrive.com

Address: 148.66.234.46

PeterUK

whats with DNS being by localhost 127.9.0.1 ?

laltobelli

Sorry, typo it was 127.0.0.1

PeterUK

Ok but still that means your not DNS to Zywall or some DNS like 8.8.8.8 so your DNS to your PC that then DNS so do you know why that is?

It would seem your PC is setup to 127.0.0.1 for DNS which might be a red flag if you don't know why get to your network setting and change to use the router LAN gateway IP as DNS or 8.8.8.8 or other DNS

laltobelli

It is a server running DNS for a domain.

valerio_vanni

https://community.zyxel.com/en/discussion/comment/75409#Comment_75409

On an address reserved for loopback?

Have you tried to use local (regular) address of DNS server (10.10.10.5, 192.168.1.20 etc)?

laltobelli

Sorry about the delay in getting back. I wanted to go onsite to do this. After changing the DNS to 8.8.8.8, flushing the DNS, rebooting and clearing the cache on the browsers the problem did not go away. Below is the output of ipconfig before and after the DNS change and the nslookup results:

Before changing DNS to 8.8.8.8
Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) 82579V Gigabit Network Connection
Physical Address. . . . . . . . . : 4C-72-B9-43-80-E7
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 192.168.1.95(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : Monday, February 17, 2025 11:01:43 AM
Lease Expires . . . . . . . . . . : Saturday, March 01, 2025 11:01:37 AM
Default Gateway . . . . . . . . . : 192.168.1.4
DHCP Server . . . . . . . . . . . : 192.168.1.4
DNS Servers . . . . . . . . . . . : 192.168.1.6
192.168.1.4
208.67.220.220
NetBIOS over Tcpip. . . . . . . . : Disabled

C:\WINDOWS\system32>nslookup www.idrive.com
Server: FHSERVER.FANDHACCTG.LOCAL
Address: 192.168.1.6

Non-authoritative answer:
Name: www.idrive.com
Address: 148.66.234.46

After changing DNS to 8.8.8.8
C:\WINDOWS\system32>ipconfig /flushdns

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

C:\WINDOWS\system32>ipconfig /registerdns

Windows IP Configuration

Registration of the DNS resource records for all adapters of this computer has been initiated. Any errors will be reported in the Event Viewer in 15 minutes.

C:\WINDOWS\system32>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : FNH-PC2
Primary Dns Suffix . . . . . . . : FANDHACCTG.LOCAL
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : FANDHACCTG.LOCAL

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) 82579V Gigabit Network Connection
Physical Address. . . . . . . . . : 4C-72-B9-43-80-E7
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 192.168.1.95(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : Monday, February 17, 2025 11:01:43 AM
Lease Expires . . . . . . . . . . : Saturday, March 01, 2025 3:11:59 PM
Default Gateway . . . . . . . . . : 192.168.1.4
DHCP Server . . . . . . . . . . . : 192.168.1.4
DNS Servers . . . . . . . . . . . : 8.8.8.8
NetBIOS over Tcpip. . . . . . . . : Disabled

Ethernet adapter Ethernet:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : TAP-Win32 Adapter OAS
Physical Address. . . . . . . . . : 00-FF-23-E2-30-24
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes

C:\WINDOWS\system32>nslookup www.idrive.com
Server: dns.google
Address: 8.8.8.8

Non-authoritative answer:
Name: www.idrive.com
Address: 148.66.234.46

C:\WINDOWS\system32>

PeterUK

try the following

How to clean the Content Filter's cache by the CLI ? — Zyxel Community

laltobelli

I cleaned the content filter, as in the article. It made no difference. I also tested the content filter and it does not appear to be working properly. It apppears to be configured properly but I am looking into why it does not appear to block sites in any of the catergories.