when accessing via IP; click to proceed warning #2

New Issue

saavagebueno · 2026-02-02T04:47:16-05:00

saavagebueno commented

2026-02-02 04:47:16 -05:00

Originally created by @iptvcld on GitHub (Jan 31, 2024).

SInce AGH only allows the use of an IP for use a block page (not sure why...) I keep getting a message to click here to proceed then the custom page comes up.. Does anyone have any tricks for this?

Originally created by @iptvcld on GitHub (Jan 31, 2024). SInce AGH only allows the use of an IP for use a block page (not sure why...) I keep getting a message to click here to proceed then the custom page comes up.. Does anyone have any tricks for this?

saavagebueno commented

2026-02-02 04:47:17 -05:00

@senhan07 commented on GitHub (Jan 31, 2024):

SInce AGH only allows the use of an IP for use a block page (not sure why...) I keep getting a message to click here to proceed then the custom page comes up.. Does anyone have any tricks for this?

The problem is happening because the website uses a secure connection (HTTPS), but the website certificate doesn't match the destination where is the redirection IP Address you configured. That's why you see a warning page. When you try accessing the website with a regular connection (HTTP), it works fine and shows the block page.

One potential solution to make it work with HTTPS is by using a proxy with SSL bump, but I haven't tried that yet. It might help with SSL issue

@senhan07 commented on GitHub (Jan 31, 2024): > SInce AGH only allows the use of an IP for use a block page (not sure why...) I keep getting a message to click here to proceed then the custom page comes up.. Does anyone have any tricks for this? The problem is happening because the website uses a secure connection (HTTPS), but the website certificate doesn't match the destination where is the redirection IP Address you configured. That's why you see a warning page. When you try accessing the website with a regular connection (HTTP), it works fine and shows the block page. One potential solution to make it work with HTTPS is by using a proxy with SSL bump, but I haven't tried that yet. It might help with SSL issue

saavagebueno commented

2026-02-02 04:47:17 -05:00

@iptvcld commented on GitHub (Jan 31, 2024):

SInce AGH only allows the use of an IP for use a block page (not sure why...) I keep getting a message to click here to proceed then the custom page comes up.. Does anyone have any tricks for this?

The problem is happening because the website uses a secure connection (HTTPS), but the website certificate doesn't match the destination where is the redirection IP Address you configured. That's why you see a warning page. When you try accessing the website with a regular connection (HTTP), it works fine and shows the block page.

One potential solution to make it work with HTTPS is by using a proxy with SSL bump, but I haven't tried that yet. It might help with SSL issue

I have been trying to get this going for a 4 days now. I have HAProxy that redirect 80 to 443 and setup a nginx server but still get asked to click. There has to be a way to make this redirect work and one time i got it working on a computer but then on the mobile device it does not work

@iptvcld commented on GitHub (Jan 31, 2024): > > SInce AGH only allows the use of an IP for use a block page (not sure why...) I keep getting a message to click here to proceed then the custom page comes up.. Does anyone have any tricks for this? > > The problem is happening because the website uses a secure connection (HTTPS), but the website certificate doesn't match the destination where is the redirection IP Address you configured. That's why you see a warning page. When you try accessing the website with a regular connection (HTTP), it works fine and shows the block page. > > One potential solution to make it work with HTTPS is by using a proxy with SSL bump, but I haven't tried that yet. It might help with SSL issue I have been trying to get this going for a 4 days now. I have HAProxy that redirect 80 to 443 and setup a nginx server but still get asked to click. There has to be a way to make this redirect work and one time i got it working on a computer but then on the mobile device it does not work

saavagebueno commented

2026-02-02 04:47:17 -05:00

@senhan07 commented on GitHub (Feb 1, 2024):

SInce AGH only allows the use of an IP for use a block page (not sure why...) I keep getting a message to click here to proceed then the custom page comes up.. Does anyone have any tricks for this?

The problem is happening because the website uses a secure connection (HTTPS), but the website certificate doesn't match the destination where is the redirection IP Address you configured. That's why you see a warning page. When you try accessing the website with a regular connection (HTTP), it works fine and shows the block page.
One potential solution to make it work with HTTPS is by using a proxy with SSL bump, but I haven't tried that yet. It might help with SSL issue

I have been trying to get this going for a 4 days now. I have HAProxy that redirect 80 to 443 and setup a nginx server but still get asked to click. There has to be a way to make this redirect work and one time i got it working on a computer but then on the mobile device it does not work

By you mean HAProxy redirect 80 to 443 is that the nginx server running on HTTPS?, Just running the web server on HTTPS alone won't solve the issue. The problem lies in a mismatch between the domain/IP address on the SSL certificate.

so for ex. when you trying open blocked site like https://xxx.com (IP:118.98.115.77) the AGH redirect the IP Address to nginx (ex. IP:192.168.1.10). since the SSL certificate on https://xxx.com is only accept domain xxx.com or 118.98.115.77 the browser show up warning page telling the certificate doesn't match

@senhan07 commented on GitHub (Feb 1, 2024): > > > SInce AGH only allows the use of an IP for use a block page (not sure why...) I keep getting a message to click here to proceed then the custom page comes up.. Does anyone have any tricks for this? > > > > > > The problem is happening because the website uses a secure connection (HTTPS), but the website certificate doesn't match the destination where is the redirection IP Address you configured. That's why you see a warning page. When you try accessing the website with a regular connection (HTTP), it works fine and shows the block page. > > One potential solution to make it work with HTTPS is by using a proxy with SSL bump, but I haven't tried that yet. It might help with SSL issue > > I have been trying to get this going for a 4 days now. I have HAProxy that redirect 80 to 443 and setup a nginx server but still get asked to click. There has to be a way to make this redirect work and one time i got it working on a computer but then on the mobile device it does not work By you mean HAProxy redirect 80 to 443 is that the nginx server running on HTTPS?, Just running the web server on HTTPS alone won't solve the issue. The problem lies in a mismatch between the domain/IP address on the SSL certificate. so for ex. when you trying open blocked site like `https://xxx.com (IP:118.98.115.77)` the AGH redirect the IP Address to nginx (ex. `IP:192.168.1.10`). since the SSL certificate on `https://xxx.com` is only accept domain `xxx.com` or `118.98.115.77` the browser show up warning page telling the certificate doesn't match

saavagebueno commented

2026-02-02 04:47:17 -05:00

@iptvcld commented on GitHub (Feb 1, 2024):

SInce AGH only allows the use of an IP for use a block page (not sure why...) I keep getting a message to click here to proceed then the custom page comes up.. Does anyone have any tricks for this?

The problem is happening because the website uses a secure connection (HTTPS), but the website certificate doesn't match the destination where is the redirection IP Address you configured. That's why you see a warning page. When you try accessing the website with a regular connection (HTTP), it works fine and shows the block page.
One potential solution to make it work with HTTPS is by using a proxy with SSL bump, but I haven't tried that yet. It might help with SSL issue

I have been trying to get this going for a 4 days now. I have HAProxy that redirect 80 to 443 and setup a nginx server but still get asked to click. There has to be a way to make this redirect work and one time i got it working on a computer but then on the mobile device it does not work

By you mean HAProxy redirect 80 to 443 is that the nginx server running on HTTPS?, Just running the web server on HTTPS alone won't solve the issue. The problem lies in a mismatch between the domain/IP address on the SSL certificate.

so for ex. when you trying open blocked site like https://xxx.com (IP:118.98.115.77) the AGH redirect the IP Address to nginx (ex. IP:192.168.1.10). since the SSL certificate on https://xxx.com is only accept domain xxx.com or 118.98.115.77 the browser show up warning page telling the certificate doesn't match

Hmm so it seems like there is no workaround for this? Why even have an option to redirect to a custom page?

@iptvcld commented on GitHub (Feb 1, 2024): > > > > SInce AGH only allows the use of an IP for use a block page (not sure why...) I keep getting a message to click here to proceed then the custom page comes up.. Does anyone have any tricks for this? > > > > > > > > > The problem is happening because the website uses a secure connection (HTTPS), but the website certificate doesn't match the destination where is the redirection IP Address you configured. That's why you see a warning page. When you try accessing the website with a regular connection (HTTP), it works fine and shows the block page. > > > One potential solution to make it work with HTTPS is by using a proxy with SSL bump, but I haven't tried that yet. It might help with SSL issue > > > > > > I have been trying to get this going for a 4 days now. I have HAProxy that redirect 80 to 443 and setup a nginx server but still get asked to click. There has to be a way to make this redirect work and one time i got it working on a computer but then on the mobile device it does not work > > By you mean HAProxy redirect 80 to 443 is that the nginx server running on HTTPS?, Just running the web server on HTTPS alone won't solve the issue. The problem lies in a mismatch between the domain/IP address on the SSL certificate. > > so for ex. when you trying open blocked site like `https://xxx.com (IP:118.98.115.77)` the AGH redirect the IP Address to nginx (ex. `IP:192.168.1.10`). since the SSL certificate on `https://xxx.com` is only accept domain `xxx.com` or `118.98.115.77` the browser show up warning page telling the certificate doesn't match Hmm so it seems like there is no workaround for this? Why even have an option to redirect to a custom page?

saavagebueno commented

2026-02-02 04:47:17 -05:00

@sannidhyaroy commented on GitHub (Jan 30, 2025):

Hmm so it seems like there is no workaround for this? Why even have an option to redirect to a custom page?

Because it will work, if setup correctly. You have to trust the root CA of the block page, otherwise it will show SSL errors due to the above mentioned reasons.

For now, I have pointed my AdGuard Home instance to use ControlD blockpage:

Blocking IPv4: 23.171.240.158
Blocking IPv6: 2606:1a40:3000:4800::158

This will work, but to remove SSL Warnings, you also have to install the ROOT CA of ControlD (in this case).

I have no problems with it and this is working perfectly fine, but if possible, I didn't want the ControlD branding for my AdGuard Home Instance, and show the website domain that was blocked (like this repo project shows).

@sannidhyaroy commented on GitHub (Jan 30, 2025): > Hmm so it seems like there is no workaround for this? Why even have an option to redirect to a custom page? Because it will work, if setup correctly. You have to trust the root CA of the block page, otherwise it will show SSL errors due to the above mentioned reasons. For now, I have pointed my AdGuard Home instance to use ControlD blockpage: - Blocking IPv4: 23.171.240.158 - Blocking IPv6: 2606:1a40:3000:4800::158 This will work, but to remove SSL Warnings, you also have to install the ROOT CA of ControlD (in this case). I have no problems with it and this is working perfectly fine, but if possible, I didn't want the ControlD branding for my AdGuard Home Instance, and show the website domain that was blocked (like this repo project shows).

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: starred/adguard-custom-block-page#2