Enable Content Filter HTTPS Domain Filter Block/Warn Page

Michael_I

Hello, when i activate the Block/Warn page, our browser says, that the site isn´t secure. I cant open the Block/Warn page. What can I do?

In this example, facebook ist on the black list.

jasailafan

It seems both the browser and website support HSTS.

Michael_I

What can I do, to get the Block-Website for user?

Zyxel_Jeff

Hi @Michael_IMichael_I

You can use this link to check if website support HSTS: https://hstspreload.org/ e.q. typing www.facebook.com and replying it is currently preload HSTS.

You may also use this link to check if your browser(e.q. IE, Edge, Firefox, Chrome etc.) and its version support HSTS: https://caniuse.com/stricttransportsecurity

Michael_I

Yes, the browser supports HSTS. Sorry, still don´t know what to to...

Zyxel_Jeff

Hi @Michael_I

Per our discussion, it’s a current browser and website limitation of HSTS for HTTPS browsing security mechanism. Such as the following example, the chrome browser appears HSTS message, it is normal behavior.

And previously your firefox browser appeared HSTS message, too.

itxnc

We've been trying to test out the custom page, but the logo image is always broken. The URL it's going to is the external IP of the router instead of the internal one. Since Port 80 is blocked external... And the color styles don't work either (because the CSS link does the same thing) 


Do we have to create some weird NAT-Loopback virtual server for this to work right? Why not just use the internal IP instead?

Update
Figured it out. For security reasons - we always disable the HTTP server since we only access/admin via HTTPS. But the block page is using HTTP so you don't run into certificate issues. So you have to enable the HTTP service:


After that? The malware page works:



Though the Content Filter page doesn't show the logo:


Would you believe it's because uBlock is actually blocking the image? I can't even begin to imagine why - but confirmed that the 1 blocked item the shield indicated was my WAN IP address. What is the page doing to trigger that?

Anyway - hope this helps some of you get the custom pages going.