Paypal being blocked

[NollipfSense]

@manilx If you disable and didn't force reload, you'll get the same exact behavior.

[manilx]

@nollipfsense I did the Update-Force-Reload on every test!
It's not pfblocker or suricata from what I can tell.

[manilx]

@manilx It's pfsense because when I try the ios app via mobile provider I have no issues (Using the same DNS as backend: nextdns)

[NollipfSense]

@manilx Did you check Status > System log > firewall to see whether it's been blocked for some reason?

[manilx]

@nollipfsense Yes checked. Nothing there I can see of relevance, only PFB_stuff (now that it's on again).
This is a complete bummer.

[michmoor]

@manilx Can you check what PF knows

Also did you clear the cache on the clients?
ipconfig /flushdns

[manilx]

@michmoor

did clear browser cache and on ios restarted.

[michmoor]

@manilx Is this set up for DNS Resolver mode? What DNS servers are you even pointing to?

[manilx]

@manilx correction: I had the option to block DNS over HTTPS/TLS/QUIC on. Using nextdns using this causes issues.
Deleted that option. Reloaded.

But the issue persists.

[manilx]

@manilx Using this for nextdns:

[michmoor]

@manilx

Also remove your custom options.

Then test again.

[manilx]

@michmoor Done! No change

[michmoor]

@manilx what was done? what do you have as DNS server settings and did you remove your custom options?
Also are your clients using pfsense as their DNS server?

[manilx]

@michmoor Yes. Exactly what you suggested. Added DNS in General-Setup and removed Custom options in DNS Resolver.
Yes ALL clients use pfsense as DHCP server and DNS.

[michmoor]

@manilx said in Paypal being blocked:

Im not sure how you installed NextDNS as i see there is a way to do this via CLI with a .sh script or if you did this through the instruction on github link .

In either case, as this is a non-standard configuration, the last step i would ask you to do is restart Unbound and see if pfsense can query upstream resolvers.

[manilx]

@michmoor Actually Paypal as such is not being blocked because the site opens. Only when it opens the page to enter 2FA code does it take ages to open that one.
I installed nextdns as per their instructions by pasting the code into the DNS Resolver-General Settings-Custom Options.

I can also enter the DNS into System-General setup. Doesn't change a thing.
restarting Unbound doesn't help also.

This is the only site with an issue in my daily use. It's completely strange and unexplainable.

[michmoor]

@manilx it does state in the GitHub page

That issue is still Open.

My advice would be to use the standard configuration on pfsense. If you really want to do dns sinkholing use pfblockerNG or PiHole or Adguard but neither of these options involve mucking with Unbound with custom options.

[manilx]

@michmoor Thanks for that info! Might do this but as we have tested reverting to using 1.1.1.1 etc didn't help!

Thanks for all you input.

[NollipfSense]

@manilx You could make pfSense do DNS...and if it doesn't know, outside source will help (in my case OpenDNS).

[manilx]

@manilx Hi,

this is how it is setup!

Again it's not an issue of paypal.com not resolving at all. It resolves and opens. The issue is that when I login and thr 2FA page should appear it takes MINUTES to appear, with the indicator spinning. It then appears I enter the 2fa code and all is well.
This happens on Mac browser or ios app. When I bypass pfsense (by disabling wifi on mobile or using ProtonVPN on Mac) the page opens instantly.
So there is something at play here, which I don't understand and I guess has nothing to do with DNS as such.

I tried changing the setting to ignore local DNS and use the remote ones, thus bypassing all the DNS thing in pfsense AND the issue continues!!!!