Amazon Fire TV not working
-
Is there a possibility that I lock out myself with that? I'm connected via WAN right now :D
Trying to set the destination port range to 1-65535 it says "You must supply either a valid port or port alias for the destination port entry."
EDIT: thanks for the tip! I've edited now the first rule and leave the port empty, for cover all ports. Will try that later at home if its fixed. Will report then, thanks a lot till now!
-
Where it had 500, just make it blank to catch all ports. No - You will not be locked out.
-
See edited post above, thanks!
-
Don't thank me unless it works. Good chance its no effect at all.
-
You're right, let's see.
As I setup DMZ yesterday, I let the firewall log everything and found out that Fire TV only connects via port 80 and 443 and (I think it was) 2289 TCP. Also uses 53 as well. But even with everything allowed, it didn't work.
Maybe it's realy an UDP stream problem, don't know. Also requested the Amazon support, they can't help me right now and gave it to the technicals.Is there any possibility to see whitch ports the Fire TV is using, or trying to use?
-
I think you are going to find out fire tv will use a ton of random udp ports, but lets see.
Your pfsense setup is far from simple - its possible you have other issues.
-
Hm, first issue is if I set the NAT outbound from automatic to manual, IPsec isn't working anymore. So I edited the first rule to any port, and set back to automatic. Is that ok, or whats the difference to manual? Now IPsec is working fine again.
-
automatic totally ignores any rules you set.
when you get home try it with manual.
If it works, you might want to make a LAN segment just for fire tv.
-
I'm being stupid - duh…
You can change your first rule to the single IP of fire tv instead of the entire LAN
like 192.168.1.100/32 (replace 100 with whatever your amazon fire device is)
Then static ports will only apply to that 1 device.
-
Well I think I need automatic for the IPsec, or not?
-
Automatic has screwed me more often than not. I don't use it anywhere.
I don't use ipsec though. Still I doubt seriously its required.
-
Tested it right now, manual - no traffic passes through IPsec. Automatic - it works fine :-\
-
Oh, forgot to create a manual outbound rule for the virtual network. Now IPsec works fine with manual outbound NAT. Let's see what the FireTV say's later at home. I think there is the problem, or that the connection isn't established. After disableing and enableing the firewall, I see at the states that there are many connections from the Fire TV established. After a while, they are not anymore and it's not working anymore.
EDIT: maybe it also is a multicast problem? Could that be? I dont have any rules for IGMP traffig.
-
OK, testet it now, and it's not working :(.
Why is it only working for a few minutes after checking "Disable all packet filtering." in the advanced firewall/nat and uncheck it again? Don't know whats happening there. The firewall logs alsways says the same and allowing the traffic.
-
Im not sure. I suspect its something particular to your configuration. You have several things configured on that router.
Are you blocking ANYTHING on the LAN?
Do you have a good allow-all rule?
When you "Disable packet filtering" you are turning off the firewall.
At that point it establishes a connection and works.
The connection once open is persistent even after firewall is enabled again.
Until it eventually dies sometime later.
So I'm wondering which rule is killing it?
-
Can you post your lan firewall rules?
-
The strange thing is, if I check the disable all packet filtering to disable the firewall, every client will lost his connection. So nobody can access anything anymore. After unchecking it, everything works fine.
Here are my LAN rules right now:
http://imgur.com/Cv99Fkd
That's the allow all rule:
http://imgur.com/ncDxZ1m
These are the UDP ports opend if it is working:
http://imgur.com/rxeaChx
EDIT: hm, now it's not working anymore and the UDP connections still are established.
-
It's getting even stranger, if I try to watch a movie, sometimes it takes some minutes, but then it starts. So it seems to be very slow, but works?! :-[
EDIT: yes, if I can click to watch a trailer or film, it works now. But the menue dont works, and gets me errors. But after disable and reenable the firewall, also the menu works fast and fine.
-
Looks like you got carried away with your firewall rule set.
Looks abit over complicated.
I'm pretty sure this is a self inflicted issue.
-
Maybe there is a problem in the NAT configuration? I ask myself why everything works, also TV's but not the FireTV in the menu. The menu is too slow, but streaming works well if I get the chance to see the "play" button.