Paypal being blocked

[manilx]

Hi
I just noticed that paypal is being blocked. While the site opens when I try to login and the 2FA code entry should display it take a minute or more for this page to appear. In the browser or the ios app. It appears eventually.

I have disabled Suricata, same issue
Disabled pfblockNG, same.

I can't think of where and what is being blocked.

Help much appreciated!!!

[viragomann]

@manilx
Did you also disable DNSBL?

[manilx]

@viragomann Yes, I did disabls DNSBL part of pfblocker. No change. Then disabled pfblocker comnpletely. Same.

[NollipfSense]

@manilx If you disable and didn't force reload, you'll get the same exact behavior.

[manilx]

@nollipfsense I did the Update-Force-Reload on every test!
It's not pfblocker or suricata from what I can tell.

[manilx]

@manilx It's pfsense because when I try the ios app via mobile provider I have no issues (Using the same DNS as backend: nextdns)

[NollipfSense]

@manilx Did you check Status > System log > firewall to see whether it's been blocked for some reason?

[manilx]

@nollipfsense Yes checked. Nothing there I can see of relevance, only PFB_stuff (now that it's on again).
This is a complete bummer.

[michmoor]

@manilx Can you check what PF knows

Also did you clear the cache on the clients?
ipconfig /flushdns

[manilx]

@michmoor

did clear browser cache and on ios restarted.

[michmoor]

@manilx Is this set up for DNS Resolver mode? What DNS servers are you even pointing to?

[manilx]

@manilx correction: I had the option to block DNS over HTTPS/TLS/QUIC on. Using nextdns using this causes issues.
Deleted that option. Reloaded.

But the issue persists.

[manilx]

@manilx Using this for nextdns:

[michmoor]

@manilx

Also remove your custom options.

Then test again.

[manilx]

@michmoor Done! No change

[michmoor]

@manilx what was done? what do you have as DNS server settings and did you remove your custom options?
Also are your clients using pfsense as their DNS server?

[manilx]

@michmoor Yes. Exactly what you suggested. Added DNS in General-Setup and removed Custom options in DNS Resolver.
Yes ALL clients use pfsense as DHCP server and DNS.

[michmoor]

@manilx said in Paypal being blocked:

Im not sure how you installed NextDNS as i see there is a way to do this via CLI with a .sh script or if you did this through the instruction on github link .

In either case, as this is a non-standard configuration, the last step i would ask you to do is restart Unbound and see if pfsense can query upstream resolvers.

[manilx]

@michmoor Actually Paypal as such is not being blocked because the site opens. Only when it opens the page to enter 2FA code does it take ages to open that one.
I installed nextdns as per their instructions by pasting the code into the DNS Resolver-General Settings-Custom Options.

I can also enter the DNS into System-General setup. Doesn't change a thing.
restarting Unbound doesn't help also.

This is the only site with an issue in my daily use. It's completely strange and unexplainable.

[michmoor]

@manilx it does state in the GitHub page

That issue is still Open.

My advice would be to use the standard configuration on pfsense. If you really want to do dns sinkholing use pfblockerNG or PiHole or Adguard but neither of these options involve mucking with Unbound with custom options.