pfSense Noob / Android Phone Apps Blocked
-
I've recently installed a netgate 1100 in between my modem and old router (now in AP mode).
1100 is running vanilla, out-of the box, pfsense. I have not installed any extra packages.
Most everything on my network is functioning properly with a couple exceptions.
The big one right now is a couple apps on android phone do not connect. To be clear, some apps on the phone do work. One that doesn't work is my kid's daycare app, so I need to get this functional asap. It does function just fine when I go off wifi and onto mobile data. My weather app also is no longer pulling data on wifi.
My WAN_DHCP6 is showing as "Offline, Packetloss". I've seen this referenced in similar posts.
Any advice or suggested troubleshooting steps would be appreciated.
-
@the-stranger In a base config there's nothing out of the box that would block anything.
Since you mention IPv6 you could try disabling that on WAN and/or LAN? Otherwise if IPv6 isn't working then if a client resolves a name to IPv6 it can't connect. Might have to disconnect/reconnect the phone to let go of IPv6 though.
-
@steveits said in pfSense Noob / Android Phone Apps Blocked:
@the-stranger In a base config there's nothing out of the box that would block anything.
Since you mention IPv6 you could try disabling that on WAN and/or LAN? Otherwise if IPv6 isn't working then if a client resolves a name to IPv6 it can't connect. Might have to disconnect/reconnect the phone to let go of IPv6 though.
Disabling IPv6 on my WAN worked. The apps now function properly. Thanks for this help...simple and effective!
Is there anything I'm missing out on by disabling IPv6? Any guess why IPv6 was not working to begin with? Do other experience this same thing or is it pretty unusual?
-
@the-stranger With a working IPv6 setup, IPV6 is fine. Occasionally someone will have a server that isn't configured correctly on IPv6 but they don't know. That's getting rarer. You could ask your ISP about your setup and see what they say as to why it isn't working. Sites like https://test-ipv6.com/ may help.
-
@steveits said in pfSense Noob / Android Phone Apps Blocked:
@the-stranger With a working IPv6 setup, IPV6 is fine. Occasionally someone will have a server that isn't configured correctly on IPv6 but they don't know. That's getting rarer. You could ask your ISP about your setup and see what they say as to why it isn't working. Sites like https://test-ipv6.com/ may help.
In my searches, I found this suggestion that IPv6 with DHCPv6 and "Blocking Bogons" selected can cause a failure. This was in fact the default setting for my WAN out of the box. Any validity to it?
Blocking "Bogons" breaks DHCPv6 If you like to check the box "block bogon traffic" in the interface configuration pages, it has been my experience this will prevent DHCPv6 from functioning correctly. Since that firewall rule is special, you can't slip in an "accept all IPv6 in on port 547" rule above it. This prevented my WAN interface from getting an IPv6 address assignment from my ISP until I disabled it. Not sure if this is a PFSense bug or just an unfortunate part of reality... I suspect the former.
https://www.reddit.com/r/PFSENSE/comments/av3eu2/ipv6_for_dummies/
-
@the-stranger I don't recall hearing that before. You can turn it off and try. Bogons are unassigned IP ranges.