Windows update

[wildmanron]

How do i get windows update exceptions to work in the firewall I thought it was working but my wireless side is not allowing update for windows 7 to work and i am not sure what i have to do to get windows update to work on wired and wireless. i have had this thing working for some time now but the windows update to work.  My Pandora isn't working on my cell phone wireless side ether. is Instagram can any one tell me what i need to do to get these all working. Thanks for your time

[chpalmer]

You need to share a bit more information about your setup.  This should all work by default.

:)

[wildmanron]

what do i need to show you I know its probably something i did wrong setting up this thing i just did a bunch of guessing and it seem to work but none of this stuff is working now

[phil.davis]

Show the firewall rules on LAN.

[wildmanron]

Is this what you need or is there something else i need


[Birke]

do you have a similar rule like the "Default allow …" on your WLANWIFI-interface?

[wildmanron]

This is all that is in the WiFi side


[wildmanron]

I added a rule just like the lan one but it still not letting me get my windows update i still get the error that it isn't talking to the update server at Microsoft.

[phil.davis]

Did you setup any IPv6 on your pfSense?
I am just thinking that maybe if the WiFi interface has been given an IPv6 address, and the Windows devices learn an IPv6 address that looks global… then they will think that IPv6 is available and try to use the Windows Update server at its IPv6 address.

Do```
ipconfig

This is just a stab-in-the-dark from me - I thought of it when I noticed that the default pass all rule for IPv6 is not there on LAN.

[wildmanron]

No sir i don't have any of the  IPv6 address stuff set up as far as i know all the ipv6 stuff is turned off. I only run ipv4 as far as i know. is there a file or log or something you could look at that might tell you where I am, going wrong with my setup maybe.

[wildmanron]

Not only am I not able to get my windows updates still I cant get the Pandora or instagram to work on this thing all on the wireless side can someone please tell me where to go to fix this and what info you need to help me. I just don't get it build this thing to help protect my systems and now it wont even let me do anything with the windows updates and the Pandora and the instagram on the wireless side of the system.

[jahonix]

You cannot install Windows updates on Ubuntu  ;D

[wildmanron]

i am not trying to install on Ubuntu thats just the system i used to show the screen shots of the firewall rules that is just one of my 10 systems that are on the wired side the netbook and a kodi rig are my only two windows based systems the kodi system is wired and the netbook is on the wireless side along with my two phones.

The wired side seems to work ok its the wireless side that wont download the windows updates. keeps giving me the error that i need to add the Microsoft web address to the firewall exceptions or allow list and i must be stupid cause i don't know where to find such a place in the pf sense firewall stuff i love this thing but i don't understand where i am suppose to put such things. just a little help would be greatly appreciated.

[jahonix]

I was in the mood for a some unseriousness  ::)

Do you have name resolution on your wifi interface, e.g. can you browse or ping update.microsoft.com from those machines not working properly?
With that much problems there seems to be missing something basically.
Which version of pfSense are you running?

[wildmanron]

Mr  jahonix:

No i can not ping update.Microsoft.com from my netbook But it works on my wired windows system just fine its just my three wireless systems that are not talking to the programs i have listed in the last few post.

i did an Microsoft windows update on my desktop Wired windows system and it went through just fine but i can not get the wireless netbook to update it keeps telling me the same error as reported in the one post so i am at a total loss why the wireless side is goofing up and the wired side is not.

Just not sure what i am missing here

Version 2.3.4-RELEASE (i386)
built on Wed May 03 15:22:11 CDT 2017
FreeBSD 10.3-RELEASE-p19

[jahonix]

Which error do you get when trying to ping www.google.com or anything not local?

You either have no DNS server configured for that interface or you're missing rules.

[MrZumma]

How about a screenshot of your Outbound NAT entries.  Also, try pinging 4.2.2.2 from the WLANWIFI network.

[wildmanron]

This is my out bound Nat settings  & for the pinging of 4.2.2.2 worked ok so did ping google.com But ping of update.microsoft.com still not working.  This is the ping from the wlanwifi side from my net book it says4 sent and 4 received for the google & 4.2.2.2  but for the microsoft update it says request timed out twice  2 sent 2 lost

The two screen shoots are of the same thing just one is the top of the page and the other is the rest of the page

Thanks for all your help this far i just want to say I thought I knew what i was doing but i guess i am not as smart as i thought i was.

is there any more files or areas you folks may need to look at i can set up my teamviewer so someone can log in and look at the whole setup and maybe be able to fix it them selfs i am more than happy to do that thanks again.  Wildmanron


[phil.davis]

Do a tracert to update.microsoft.com and see the hops it goes along.

tracert update.microsoft.com

That will tell you if it ever leaves the firewall towards the internet, or is spinning around or dropped somehow in pfSense or your own network.

[wildmanron]

Ok i thank you for this command but can you explane to me how to use the command and witch one of the systems do i use to issue the command from.