hello.
how would i configure my gateway dns and or any of my policies to display the blockpage as the domain that was blocked?
for example, if, example.domain was blocked, i want it to display the blockpage on that same domain, not redirect to the team domain
That’s not a feature that’s available in the product today.
What’s the use case?
well, in my opinion, if you redirect to the team domain, that could theoretically, if things are not configured correctly by an administrator, allow for someone to just login. I had permission to pentest my school, and they once did this and that led me to an administrative domain. my schools filter now directly shows the blockpage on the domain.
The admin page for Cloudflare Zero Trust isn’t the team name, but if you think you have an example of an exploit you can submit it to their bug bounty program:
2 Likes