Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    New COD MWII Blocked By pfSense

    Scheduled Pinned Locked Moved Gaming
    newcall of dutymwii blockedby pfsense
    64 Posts 5 Posters 12.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • R
      rcoleman-netgate Netgate @johnpoz
      last edited by

      @johnpoz I would also start from a clean firewall slate... no special rules, no ports forwarded, check your Outbound NAT to make sure it's clean, etc.

      Ryan
      Repeat, after me: MESH IS THE DEVIL! MESH IS THE DEVIL!
      Requesting firmware for your Netgate device? https://go.netgate.com
      Switching: Mikrotik, Netgear, Extreme
      Wireless: Aruba, Ubiquiti

      johnpozJ E 2 Replies Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator @rcoleman-netgate
        last edited by

        @rcoleman-netgate I would concur.. should be pretty much a default install..

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        E 1 Reply Last reply Reply Quote 0
        • E
          EmJeezy @johnpoz
          last edited by EmJeezy

          @johnpoz

          When you use vpn, do you use different dns.
          not explicitly no. On my hardline connection, my sg1100 provides DNS (using google 8.8.8.8)

          Are you running anything pfsense like ips, or proxy, blocking dns with lists with pfblocker.
          I do have pfblocker but it has been disabled for a long time. No other proxy or ips set up

          Are you filtering outbound traffic? Or are you using the default any any rule?
          firewall>nat>outbound setting, i am not filtering outbound. Only using default any any rule.

          I would think if there was something odd with this new game and even logging in with pfsense - then wouldn't the forum be on fire with people having issues, also on other social media. I can't believe your like the 1 user using pfsense wanting to play this new game ;) hehehe

          yah for sure. At first i thought it may be a network wide problem on activision end and in relation to the NEW COD MWII,but yah, quickly found I seem to be the only one having this odd issue ;-/

          Ran a packet capture on my gaming pc LAN IP, while trying to connect to COD MWII ->

          6d1166dd-bb16-4f5d-950c-4129b1877955-image.png

          pcap is attached. packetcapture(1).pcap

          johnpozJ 1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator @EmJeezy
            last edited by johnpoz

            @emjeezy your pcap isn't actually attached, I can not download it.

            You want to use the file upload, not image and might need to change to .pcap extension vs .cap

            NTLM-wenchao.pcap

            test cap

            NTLM-wenchao.cap

            Testing file upload of pcap or .cap they seem to be working.

            Make sure you use file not image

            file.jpg

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            1 Reply Last reply Reply Quote 0
            • E
              EmJeezy @rcoleman-netgate
              last edited by

              @rcoleman-netgate firewall is mostly default config, lightly configured. Will keep in mind though, ty.

              johnpozJ 1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator @EmJeezy
                last edited by johnpoz

                @emjeezy that capture shows no connections at all to anything external

                connections.jpg

                And looks like you are limited to 100 packets.. But there is no info in that pcap that would help.. Since your not trying to go anywhere other than 172.16.25.2 which sure isn't a internet IP.

                You have some remote desktop connection in that sniff - I see the RDP 3389

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                E 1 Reply Last reply Reply Quote 0
                • E
                  EmJeezy @johnpoz
                  last edited by

                  @johnpoz i think the pcap i need to do is WAN and not local. Problem is with the WAN pcap i cannot filter (at least not from pfsense) on the local IP.

                  johnpozJ 1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator @EmJeezy
                    last edited by

                    @emjeezy no lan is fine.. That sniff has zero traffic going to any internet address in it.. To get to the internet you have to send it to pfsense right? But pfsense isn't seeing any traffic going to the internet in that sniff.

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                    E 1 Reply Last reply Reply Quote 0
                    • E
                      EmJeezy @johnpoz
                      last edited by

                      @johnpoz

                      You have some remote desktop connection in that sniff - I see the RDP 3389
                      yes i am remoted onto my gaming pc right now

                      Trying the pcap again on lan..

                      johnpozJ 1 Reply Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator @EmJeezy
                        last edited by johnpoz

                        @emjeezy nor did see even any dns queries in that sniff. Only thing see in there is part of remote desktop connection.

                        You most likely filled up your sniff before you even started anything because you didn't change the limit from 100 to 0

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        E 1 Reply Last reply Reply Quote 0
                        • E
                          EmJeezy @johnpoz
                          last edited by

                          @johnpoz said in New COD MWII Blocked By pfSense:

                          You most likely filled up your sniff before you even started anything because you didn't change the limit from 100 to 0

                          right, i forgot to change the 'count' to 0. changed it now and running another pcap while trying to connect to COD..

                          johnpozJ 1 Reply Last reply Reply Quote 0
                          • johnpozJ
                            johnpoz LAYER 8 Global Moderator @EmJeezy
                            last edited by

                            @emjeezy make sure you flushed the clients local dns cache as well - so we can see if any dns queries it asks for are not being answered.

                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                            If you get confused: Listen to the Music Play
                            Please don't Chat/PM me for help, unless mod related
                            SG-4860 24.11 | Lab VMs 2.8, 24.11

                            E 1 Reply Last reply Reply Quote 0
                            • E
                              EmJeezy @johnpoz
                              last edited by

                              @johnpoz

                              copy. will do.

                              1 Reply Last reply Reply Quote 0
                              • E
                                EmJeezy
                                last edited by

                                @johnpoz So fighting the pcap size, too large to upload here. Set count to a thousand packets and ran. Hopefully it captured some useful traffic. updated pcap attached.

                                packetcapture(2).pcap

                                johnpozJ 1 Reply Last reply Reply Quote 0
                                • johnpozJ
                                  johnpoz LAYER 8 Global Moderator @EmJeezy
                                  last edited by

                                  @emjeezy well can see no dns responses for stuff being asked for

                                  nodnsansswer.jpg

                                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                                  If you get confused: Listen to the Music Play
                                  Please don't Chat/PM me for help, unless mod related
                                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                                  E 1 Reply Last reply Reply Quote 0
                                  • E
                                    EmJeezy @johnpoz
                                    last edited by

                                    @johnpoz humm..yah thats my machine asking my firewall for dns..thats normal. Wonder why my firwewall would fail to answer. I have 8.8.8.8 set as primary and 9.9.9.9 as 2ndary dns server.

                                    R 1 Reply Last reply Reply Quote 0
                                    • R
                                      rcoleman-netgate Netgate @EmJeezy
                                      last edited by

                                      @emjeezy What is DNS Resolver set up for?
                                      And System->General for the DNS calls? 8f31ca46-d38a-4a1b-a9b7-653145dee84e-image.png

                                      Ryan
                                      Repeat, after me: MESH IS THE DEVIL! MESH IS THE DEVIL!
                                      Requesting firmware for your Netgate device? https://go.netgate.com
                                      Switching: Mikrotik, Netgear, Extreme
                                      Wireless: Aruba, Ubiquiti

                                      E johnpozJ 2 Replies Last reply Reply Quote 0
                                      • E
                                        EmJeezy @rcoleman-netgate
                                        last edited by

                                        @rcoleman-netgate

                                        mine is set to:

                                        8699c0cb-9d84-44b3-8e2a-9e69e7ba728e-image.png

                                        I will say i do have my dns resolver enabled too ->

                                        de5d2673-f868-4c53-a62d-32284f5fc45c-image.png

                                        R 1 Reply Last reply Reply Quote 0
                                        • johnpozJ
                                          johnpoz LAYER 8 Global Moderator @rcoleman-netgate
                                          last edited by

                                          @rcoleman-netgate

                                          I didn't find any that didn't have a record.. From the ones that he showed no response for. I queried for them and they all responded.

                                          But like that one with loginservice.prod in the name - if that doesn't get an answer, it highly unlikely to be able to login ;)

                                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                                          If you get confused: Listen to the Music Play
                                          Please don't Chat/PM me for help, unless mod related
                                          SG-4860 24.11 | Lab VMs 2.8, 24.11

                                          1 Reply Last reply Reply Quote 0
                                          • R
                                            rcoleman-netgate Netgate @EmJeezy
                                            last edited by

                                            @emjeezy Is DNS resolver running? Check Status->Services

                                            Ryan
                                            Repeat, after me: MESH IS THE DEVIL! MESH IS THE DEVIL!
                                            Requesting firmware for your Netgate device? https://go.netgate.com
                                            Switching: Mikrotik, Netgear, Extreme
                                            Wireless: Aruba, Ubiquiti

                                            E johnpozJ 2 Replies Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.