Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    How do I allow a website that is blocking my VPN

    Scheduled Pinned Locked Moved OpenVPN
    15 Posts 3 Posters 1.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      mauroman33
      last edited by

      @cobrahead:

      There is one particular website that I can not access while my traffic is routed through my VPN service. Is it possible to create a 'rule' that allows access to that one website through by default ISP WAN?

      Thanks

      You can try something like that

      example.png
      example.png_thumb

      1 Reply Last reply Reply Quote 0
      • C
        cobrahead
        last edited by

        @mauroman33:

        You can try something like that

        Should it go on top of other rules?

        rules.JPG
        rules.JPG_thumb

        "PERFECTION IS THE ENEMY OF PERFECTLY ADEQUATE."

        1 Reply Last reply Reply Quote 0
        • M
          mauroman33
          last edited by

          yes, above the rules with the VPN gateway.
          to check you can enter an URL like ipleak.net in the used alias. here it works.

          1 Reply Last reply Reply Quote 0
          • C
            cobrahead
            last edited by

            @mauroman33:

            yes, above the rules with the VPN gateway.
            to check you can enter an URL like ipleak.net in the used alias. here it works.

            Does this look right? I created an alias. It works for the ipleak.net test, but not for the bank I am trying to access.

            alias.JPG
            alias.JPG_thumb
            rules.JPG
            rules.JPG_thumb
            rule1.JPG
            rule1.JPG_thumb

            "PERFECTION IS THE ENEMY OF PERFECTLY ADEQUATE."

            1 Reply Last reply Reply Quote 0
            • M
              mauroman33
              last edited by

              looks good except that Protocol in my rule is set as Any, not TCP

              1 Reply Last reply Reply Quote 0
              • C
                cobrahead
                last edited by

                @mauroman33:

                looks good except that Protocol in my rule is set as Any, not TCP

                I changed that, still no luck with the bank. Should I be using something besides the FQDN of the bank? If I go to www.bank.com and click login, I am directed to https://secure.bank.com

                I put both bank.com and secure.bank.com in the HOST field on the Alias page.

                "PERFECTION IS THE ENEMY OF PERFECTLY ADEQUATE."

                1 Reply Last reply Reply Quote 0
                • M
                  mauroman33
                  last edited by

                  Sorry mate, I have no idea. Last chance is a guru's tip.

                  1 Reply Last reply Reply Quote 0
                  • C
                    cobrahead
                    last edited by

                    @mauroman33:

                    Sorry mate, I have no idea. Last chance is a guru's tip.

                    Thanks! I always appreciate your help!

                    "PERFECTION IS THE ENEMY OF PERFECTLY ADEQUATE."

                    1 Reply Last reply Reply Quote 0
                    • C
                      cobrahead
                      last edited by

                      @johnpoz:

                      Post up your rules… Not going to read threads to find what exactly... Your first thread is 24 pages long.  Your 2nd thread I have quite a few posts in there..  But they are well over a year ago.

                      Without seeing your rules - in general, create an alias and put your xyzbank.com fqdn in the alias and use that as dest allowing before you force stuff out your PIA connection.

                      I think my issue is with the fqdn for the bank. The test works with ipleak.net (and similiar sites) but when I change that to xyzbank.com (and secure.xyzbank.com) it is not working. Should I be using another approach besides the fqdn for an institution like xyzbank ?

                      thx

                      "PERFECTION IS THE ENEMY OF PERFECTLY ADEQUATE."

                      1 Reply Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator
                        last edited by

                        what is the bank fqdn… Did you validate that it resolves and is in the table for your alias?

                        Why would you need to hide the fqdn of some bank... That is like not wanting to post this website I search for stuff on is www.google.com -- but keep that on the DL ;)

                        For example I bank with chase, they are www.chase.com, but that is also a cname...  See

                        ;; QUESTION SECTION:
                        ;www.chase.com.                IN      A

                        ;; ANSWER SECTION:
                        www.chase.com.          3571    IN      CNAME  wwwbcchase.gslb.bankone.com.
                        wwwbcchase.gslb.bankone.com. 3571 IN    A      159.53.84.126

                        and then might get redirected to some other fqdn in your browser, etc.. So you need to validate that your alias is populating with the IP your actually going to, etc.

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        1 Reply Last reply Reply Quote 0
                        • C
                          cobrahead
                          last edited by

                          @johnpoz:

                          what is the bank fqdn… Did you validate that it resolves and is in the table for your alias?

                          Why would you need to hide the fqdn of some bank... That is like not wanting to post this website I search for stuff on is www.google.com -- but keep that on the DL ;)

                          For example I bank with chase, they are www.chase.com, but that is also a cname...  See

                          ;; QUESTION SECTION:
                          ;www.chase.com.                IN      A

                          ;; ANSWER SECTION:
                          www.chase.com.          3571    IN      CNAME  wwwbcchase.gslb.bankone.com.
                          wwwbcchase.gslb.bankone.com. 3571 IN    A      159.53.84.126

                          and then might get redirected to some other fqdn in your browser, etc.. So you need to validate that your alias is populating with the IP your actually going to, etc.

                          I should have asked if it was ok to name the bank in question, which is Bank of America.

                          I was not able to validate that it resolves, in the table I put bankofamerica.com  and secure.bankofamerica.com  for the fqdn.

                          The bookmark I have in my browser is my login page  - secure.bankofamerica.com/myaccount/etc  -    I got that bookmark by going to www.bankofamerica.com and using the link to login.

                          When I ping bankofamerica.com it returns IP 171.161.203.100 … should I be using that instead of a fqdn in the alias table?

                          Thanks!

                          "PERFECTION IS THE ENEMY OF PERFECTLY ADEQUATE."

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.