Everything works, except one single website!?!
-
I'm totally lost here. I've been running PFsense for years without issues and now, recently, I can't access my wifes business website. None of the 5+ computers in the house will access the website. My phone, using verizons 4G can access the website. My primary PC can access the website when using a VPN. My friends can access the website. I can access the website (again, primary PC, and probably all the others) if I bypass the PFsense router and plug directly into time warner. It doesn't seem to be a DNS issue (ive tried my local DNS server, Google DNS, and OpenDNS and timewarners DNS).
I updated the PFsense server from 2.02 to the newest (2.2.2) AFTER having these problems, hoping that the update would fix the issue. I've cleared DNS (flushDNS) on all the local machines to no avail.
The website is www.pottingerphoto.com
the error chrome is giving me is: This webpage is not available ERR_CONNECTION_TIMED_OUT
"Google Chrome could not load the webpage because pottingerphoto.com took too long to respond. The website may be down, or you may be experiencing issues with your Internet connection."The website is hosted through godaddy and the DNS name is hosted through Yahoo domains (yuck!). But it doesnt seem to be an issue on their end since it works fine anywhere and everywhere except behind my PFsense box.
I cleared all NAT and firewall rules I had created and that also didn't seem to help.
netflix works, amazon works, all google services work, Steam and steam games work, P2P services/websites all work, every website I can think of and try works except this one!
Its clearly a PFsense issue because if I pull PFsense out of the chain the site works fine. I love the overall reliability of PFsense so i'm really hoping someone has a fix for this so I don't have to dump PFsense.
Let me know what additional information might be needed.
-
WFM. (If showing an empty page with Find us on Google+ and right-click to play Flash junk placeholder counts as "works".) Worthless shit, that website.
-
It works for me and I am behind PFSense.
Have you compared DNS to see ensure you get the same response when you are behind PFsense and when you are not? Are you running squid?
-
Don't dump pfSense, but I guess that is what you should do with your setup.
The site shows up, me using pfSense.Btw: strange, that site "Find us on Google+" and nothing more …..
-
Any chance your home IP address has been blacklisted by the website hoster?
You could test by spoofing the MAC address of your WAN NIC, then reboot your modem and renew pfSense.
That should give you a new public IP address and you can try your wife's website.Worth a shot.
-
It's not pfSense. It's something else. (btw, it works from here too.)
-
Do you have something like AdBlocker that would block the content?
It seems like the entire website after the "find us on google+" is loading Adobe Flash. -
ok. I'll go through the replies from the top:
Doktornotor: Thanks for the review of the website. Not sure if your trying to be a jerk, or just don't care. You might have missed the part where I said it was my WIFE'S website. I'm not real fond of flash either, but I usually try to find better words then "dude, your stuff looks like week old cow shit". And no, if you didn't actually see a functional website without having to click anything then it didn't really work. Its not non-functional by design, lol. When I remove PFsense from the chain everything works flawlessly. No clicks needed. I have no idea WTF the google+ stuff pops up in the corner but I agree, it sucks. Which browser/OS are you using?
If you want to try something not flash go to www.pottingerphoto.com/blog
MLIT: No DNS problems. Identical DNS settings when behind PFsense or when removing it from the loop. No squid, default PFsense. I'll try a blank/fresh reinstall next.
Gertjan: It does not work for you if all it shows is "find us on google+". All my friends not using PFsense get the full website without issue.
Divsys: Nope. I disabled PFsense and was able to see the website just fine with the same exact IP address. But excellent idea, I kinda wish you were right.
Derelict: It absolutely is PFsense since the only variable that's consistent is PFsense. I can change the DNS settings, use different computers, different browsers, different devices, etc. The second I get PFsense out of the way it pulls the site up instantly. Does PFsense keep cache files of websites or DNS data? (even though the PFsense server isn't running DHCP or DNS, those both run on a Windows machine, which works fine if I bypass PFsense, but it doesn't work if I bypass the windows box and leave PFsense in the chain).
Qvik: No adblocker software at the PFsense level. I do run it on the browser, but again, it works fine on the browser as long as I bypass PFsense in some way (use a different router, plug the PC directly into the cable modem, connect through a VPN, connect through a 4G phone, etc). The website is pure flash after the google+ crap. Does it come up for you? Does www.pottingerphoto.com/blog work for you? Its "Flash-Free".
Those of you who has problems getting the flash site to come up, does www.pottingerphoto.com/blog work for you? Its weird that none of my friends are reporting the problems a few people in this post have reported, so I'm concerned something is up with the hosting provider or the DNS entry that gags specifically with PFsense (which isn't ok as far as I'm concerned).
Thanks for the help so far!
-
Works here with Windows 8.1 Pro and IE 11, pfSense 2.2.2-RELEASE (i386), no packages, DNS resolver using root servers.
Brief delay at the find us on Google link, then the flash loads and plays.
Try a different browser and client.
Clear cache.
Clear cookies. -
Perhaps the error means what it says : This webpage is not available ERR_CONNECTION_TIMED_OUT.
Traceroute to 208.109.181.92 ( pottingerphoto.com) craps out, while to 208.123.73.69 (pfsense.org) completes.
Does pfsense have some kind of timeout ??
BTW both the blog and the website work from Canada.
-
Well, with all that quirkiness a reinstall shouldn't be that bad and will only take a minute or two. Might just be some strange kerfuffle. With all the time spent back and forth here it's not gonna be that painful to reinstall.
-
[edit]
Possibly an ISP is blocking it if you are in the UK[/edit], snort also blocks its for java obfuscation above level 1, and for some strange reason the ip address is already in my block list and yet I have not visited your site until a few moments ago. How strange!Edit. If an isp was blocking it I wouldnt be able to see it.
For a static Akami Technologies webserver to be blocked already is interesting along with what you have said noobie.
-
That IP is blacklisted by 'Virus Total' : https://www.robtex.com/en/advisory/ip/208/109/181/92/
-
That IP is blacklisted by 'Virus Total' : https://www.robtex.com/en/advisory/ip/208/109/181/92/
So one possible explanation is its a phishing exercise if one is cynically mind, considering the new account.
Edit.
Check your WAN logs after the visit, you'll notice an increase of incoming traffic from a variety of ip addresses, of course the geolocation of source ip's is not indicative of the culprit, it could be a bot net designed to set others up, thats what makes life interesting. Smoke & Mirrors. ;D -
Its been educational. ;D
-
Derelict: It absolutely is PFsense since the only variable that's consistent is PFsense. I can change the DNS settings, use different computers, different browsers, different devices, etc. The second I get PFsense out of the way it pulls the site up instantly. Does PFsense keep cache files of websites or DNS data? (even though the PFsense server isn't running DHCP or DNS, those both run on a Windows machine, which works fine if I bypass PFsense, but it doesn't work if I bypass the windows box and leave PFsense in the chain).
You can wank about it being pfSense all you want. It might be your misconfiguration of the same, but it's not something systemic with the software. I certainly cannot find the Block access to this single website checkbox.
You say it's your spouse's work? Do you VPN in or anything? Some other reason you would have DNS for that site hosed?
And the site only shows "Find us on Google+" to those who browse with javascript disabled ala NoScript. Completely a browser issue, nothing to do with routing or the pfSense software. I won't comment on the audacity of playing music without warning.
-
That IP address resolves to a GoDaddy server hosting a variety of sites.
At least a few raise questions as to their "integrity".pottingerphoto.com is registered to an Australian owner through Yahoo.
Assuming the best - the owner of pottingerphoto.com created a site and hosted it on a "cheap" GoDaddy server that's gotten blacklisted due to other clients on the same server.
Assuming the worst - it's a phishing/malware/social engineering attempt.
Either way, it's not a pfSense problem.
-
And no, if you didn't actually see a functional website without having to click anything then it didn't really work.
I won't click random flash shit, sorry. It is accessible just fine from behind pfSense. The Flash is blocked by my browser by default (click to play). Has nothing to do with pfSense. My interest in the contents of sites unusable without flash is absolutely zero. (BTW, same can be said about search engines, perhaps you could forward this message to your wife. There are also people who refuse to install buggy Adobe junk that gets tens of security advisories every month, or people where Flash is not available at all on their platform.)
Plus, as noted above, this whole thread starts to stink.
-
Works fine for me behind 2.2.2 after pausing to load that massive Flash blob.
-
:D
And you guys are getting tricked into this everytime :D