Various sites and services being blocked - how to fix?
-
@elmojo, Firewall> Rules> Wan> Add
Create this rule in your wan interfaces to block all
Then go to Interfaces> wan and uncheck this option
-
@silence
I'm willing to try, but can you explain the idea first please? All documentation and videos I've watched say to not disable that "bogon blocking" feature. -
@elmojo I am not very theoretical, it is simply the logical thing that I do when I configure new pfsense to disable default rules and I add this rule to block and monitor all traffic in the wan.
-
@silence That makes sense. Please excuse my (extreme) ignorance, but if we block all WAN traffic, won't that block pretty much all incoming data? Or is it only for requests that originate outside my LAN, thus making them likely to be malicious?
EDIT: I did as you show above. The logs look like this now... https://ibb.co/xL9k0cf
-
@elmojo, Apply this setting just as the image shows.
-
@elmojo, Switches from (Lan Net) To (*) In both rules
-
@silence
Okay, both done, no improvement.
I have now lost access to the Amazon app again on my phone, likely due to the DNS change.
I still cannot access the FireTV home screen, or Netflix. I can, oddly, access Amazon Prime Video on my TV. I'm not sure if that was working before or not, I never tried. -
@elmojo, try to enter again and then go to firewall logs and send me a screenshot ...
It must be quick. I want to see what blocks this.
-
@elmojo
what is the ip of your the FireTV? -
@silence said in Various sites and services being blocked - how to fix?:
@elmojo, try to enter again and then go to firewall logs and send me a screenshot ...
It must be quick. I want to see what blocks this.
This is the log about 30secs after I clicked "try again" on the FireTV.
@silence said in Various sites and services being blocked - how to fix?:
@elmojo
what is the ip of your the FireTV?I'm just guessing, since it won't tell me anywhere in the FireTV GUI, but I think it's 192.168.11.106. This is based on the hostnames on the DHCP lease page.
In any case, the firewall is only logging WAN traffic being blocked, since we have it set to allow everything on the LAN, so that internal IP isn't going to show up regardless. -
@elmojo well delete all the lan rule and create a new one allow all to all and enable logs in these rules.
-
@silence Example:
-
@silence Done.
Well, that certainly changes the look of the logs...
Here it is just after the new rule was in place, and I clicked the "try again" button on the FireTV...again. :)
I see some activity on 11.106, but it appears to pass. Maybe the "return traffic" was one of those that got blocked? It's hard to say, since I seem to have LOTS of incoming WAN 'attacks' (for lack of a better term) all the time. Is that normal? Seems like a lot. -
@elmojo, Test port Source Address = LAN
-
@silence How is the gateway? Latency
-
@silence Test passed, no problem.
Gateway: RTT-21.859ms RTTsd-0.321ms Loss-0.0% Status-Online -
-
@silence
No, not marked. I set it up the way you showed earlier.
What are you showing in that screenshot? That IP is my desktop.
That destination server is adguard DNS. It's only used on my desktop, for blocking ads.
It's very good, by the way. :)
Uugh...I'm a new user, so I have to wait 2 minutes to reply.... lol -
@elmojo, Restart Your FireTV And Then Try Browsing Again. Firewall Logs And Screenshot
-
@silence I'm sorry, I don't understand the question.
