custom block page for AdGuard Home

[AM-ElZaher]

I Just installed adguard home & use it as my DNS server for my home network and found a workaround to create custom block page as it doesn’t support it by default, here is how I did it:

• I have a domain name for my home lab -lets call it mydomain.com-
• My domain name servers are changed to Cloudflare -optional-
• I installed Adguard Home on AWS instance, very basic installation nothing different, I created static ip for it so it won’t change after
reboot and for later use
• I created new Linux ec2 instance -let’s call it block- and installed Apache web server on it,
I also created static ip for it.
• I created a DNS A record on Cloudflare named it (blocked.mydomain.com) and pointed it to my block instance public ip and proxied it.
• On the block instance I created a simple html page that tell the user that your access is denied because this page is blocked
• On the adguard home settings >> DNS settings >> blocking mode, I choose custom ip and added the public ip of the block instance.

Now whenever someone tries to access any blocked website the adguard home DNS will redirect the website to my block instance public ip which will show the blocked page html we created earlier.

[iptvcld]

does this work via mobile device without getting a cert error asking you to proceed anyways?

[iptvcld]

Sorry; i just configured things like you did and my Apache is still giving the message click to proceed as AGH only allows the use of an IP address and you cannot set an SSL for an IP.

[iptvcld]

Would you be able to share your conf?

[AM-ElZaher]

Sorry for the late reply, if your internal domain ends with xxx.lan or xxx.local change it to something else like .mynet
Of course add A record on your ADGH to point the ip address to your block domain and then add cname to your address
I.e : your block page vm is on 10.0.0.5 and will have the domain block.homelab.mynet
So in ADGH add 2 custom rewrites:
block.ip = 10.0.0.5
block.homelab.mynet = block.ip

Final question Is it redirecting to your domain directly or just the ip address on your pc?

[iptvcld]

and are you using any certs on your devices?

[iptvcld]

ok; i have added the 2 rewrites
block.ip = 192.16.2.246
blocker.example.com = block.ip

in ADGH i have the custom block IP set to 192.168.2.246

But what is doing the redirect from that IP to a secure SSL hostname? Some config needs to listen for the IP on the server and to redirect to the custom hostname

[AM-ElZaher]

I assigned a self signed cert with let’s encrypt for the block page vm only

…

On Fri, 2 Feb 2024 at 21:32 iptvcld ***@***.***> wrote: and are you using any certs on your devices? — Reply to this email directly, view it on GitHub <#5411 (reply in thread)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AMVKHQ4AX54Q52KBVE2A4TLYRU5MHAVCNFSM6AAAAAAUJQQLEWVHI2DSMVQWIX3LMV43SRDJONRXK43TNFXW4Q3PNVWWK3TUHM4DGNJQGE4TE> . You are receiving this because you authored the thread.Message ID: ***@***.*** com>

[iptvcld]

@AM-ElZaher here i am back at it again trying to make this work..
I installed AGH and my apache server on the same VM
For testing, i have opened port 80 and 443 on this VM and i have go into my cloudflare account added a new A record Block.domain.com to the public IP of my block/AGH VM.

I ended up also adding some configs in the apache server in order for it to redirect http to https and but issue is, some blocked sites it works nice and shows the blocked SSL site and for some blocked sites, it just shows your connection is not private. I am not sure what I am doing wrong here. Any help would be amazing!!

[ghostersk]

Hello @AM-ElZaher I have just sorted this issue with this: https://github.com/ghostersk/catchall-webbrowsing/tree/main
it runs as docker container, and it also records any request on that container. It is not perfect but it helps identify websites when adguard blocks them