suddenly blocked site

tjabas

hi!

i have problems reaching www.fronius.com , its been like this for 2 months now, im a total newbie on pfsense and i havent blocked this site for all i know, can someone help me how to fix this, and where to look in pfsense?

johnpoz

@tjabas its loading here.

First thing to validate - does it resolve?

;; QUESTION SECTION:
;www.fronius.com.               IN      A

;; ANSWER SECTION:
www.fronius.com.        10      IN      A       213.33.117.110
www.fronius.com.        10      IN      A       85.31.3.110

;; Query time: 130 msec

But man they have a ridiculous low ttl set..

Gertjan

@tjabas said in suddenly blocked site:

www.fronius.com

Dono what you mean with 'blocked'.

Some basic testing shows that the domain name has issues : Check here https://www.zonemaster.net/domain_check

The issues shown are note the site, but the domain name servers : one of the tld servers dns2.internic.at

johnpoz

@gertjan while agree there are some issues with the dns for that site. I still resolving it, but yeah the user needs to validate they can resolve it or not..

Gertjan

Added to a possible DNS issue, as fronius.com uses DNSSEC, the site could appear to be gone ...

DNS issues always take time (TTmessup :)) to create, and more time to "repair". Whatever was the issue, I guess we're watching the end of the story, as no company wants its site not accessible for any public.
That is, there is a list of other explanations.
The IP addresses we use ourself are not equal. Neither our ISP. Neither the peering of our ISP.
The Internet itself isn't a dedicated entity but runs over cables and infrastructure owned by companies. They can - and will - mess up. FB last week, and this morning a comparable issues happened with OVH (OVH goes to the public market next week - first estimate : 4 billion ... - this morning they blew up their own backbone)

@tjabas : pfSense itself, out of the box, doesn't work with text like "fronius.com". It's consults an external dictionary to have it translated into a number, the IP addresses. They start from 0.0.0.0 to 255.255.255.255 and are all equal (I oversimplified here).
This "lookup" is known as DNS.
Without it, the entire 'human' access to the Internet will break (systems go on happily as long as they are IP address based).

So, no, pfSense has nothing against "fronius.com" or any other domain name.

Keep in mind that your router is just a small segment in the entire chain. When there is an issue, check the chain, not only the segment ;)

tjabas

Thank you all for your answers, as i wrote earlier, im not good at this pfsense programming, if I use my phone with 4G connection i can access fronius.com without any problems, but going through my pfsense router the web page won't open, so is there something i can do to solve this?

Gertjan

@tjabas said in suddenly blocked site:

im not good at this pfsense programming

99% (or more) of the pfSense are not programmers. Just users, as farmers, shop owners, all kind of companies, and also loads of 'home users'.
Exactly like 99,9999 % of all car users are not car builders. Still, they can drive the car.

pfSense is a router firewall, and extremely comparable to your ISP router : it does the same thing.
pfSense is also special because it give you access to all kind of things that are normally 'not possible' because the end user doesn't need them (doesn't understand them).
When you installed pfSense, and you only changed the password, (and nothing, literately) you can access fronius.com just fine.
So, tell us : what did you change ?

A test :

Go here :

and enter fronius.com and look it up.

You should see this as an answer :

Next question :

can you ping these two IP's ?

If ok, tell us more about your pfSense : packages used, the connection upstream - your LAN's etc.

tjabas

@gertjan at work now but will check later tonight.