Hi @Alex_Mahone   @dariana_dev 

Thanks for posting in our business forum.

Alex_Mahone wrote

  @Clive_A 

 

Please check your inbox. I have already sent the router configuration backup file. The firmware version of the router is 1.4.1 Build 20240117 Rel.57421, and the hardware version is V1.0.

Best Regards!

Here's the reply, it is doable.

Due to the portal landing page being necessary to be accessed, TCP/UDP 53 is allowed. Psiphon will use 53 to establish the VPN tunnel with the server. Which will bypass the portal authentication.

For this issue, you can set up ACL to stop this unauthorized connection. The goal is to block TCP and UDP 53.

Create a service with TCP and UDP 53. SRC port = All. DST = TCP/UDP 53.

Direction = LAN -> WAN

SRC IP = portal subnet.

DST IP = Any.

In addition to making it more secure, you can also set up DHCP.

One Allow, one deny. First one is Allow DNS. Second one is blocking. Note that the first entry is set to be !DNS_server. You also need to create this IP group in your Preference settings to specify your DNS server.

Pictures were zipped during the conversation. Yet, still readable.

BTW, it does not affect the afterwards connection. VPN still can function.