Akamai blocking pfsense traffic "Access Denied"
-
I'm getting an access denied message on certain websites using my pfsense router. A google search reveals that it's most likely websites using Akamai. The error message looks exactly like this, complete with reference #.
If I remove the pfsense router from the equation, connecting my wifi router directly to the main WAN, I get no Access Denied errors at all. Also, If I connect to a proxy service (using PIA and the pfsense box), the errors go away.
Version 2.4.3-RELEASE-p1 (amd64) built on Thu May 10 15:02:52 CDT 2018 FreeBSD 11.1-RELEASE-p10 -
This post is deleted! -
Are you using squid or anything that may change/proxy your traffic. By default, pfSense will not manipulate your traffic except for NAT.
-
I have incoming port 80 requests redirecting to 9999 (NAT) with nginx running a reverse proxy for 3 web servers. No squid. Normal traffic isn't being proxied.
-
Lets not forget that I have to assume your IP changes when you change pfsense out for some other device because your mac changes and your isp dhcp would give you a different IP.
Are you saying that your public IP when pfsense is the same as when you connect your wifi router?
First item on their list is
Some common reasons could include:
Explicit IP blocking / blacklisting
-
Yes, the ip address does change. That surprises me. I cannot think of a reason why I'd be blacklisted.
-
What is the history of that IP you get - maybe they were doing something from that IP..
You can tweak the mac of pfsense wan interface, or use a different interface on the box for wan so that you get a different IP from your ISP.. Clone the mac of your old router for example.
-
releasing and renewing the IP address got me a new IP address. Problem solved. Thanks.
-
Good to hear - yeah pfsense doesn't do anything with the traffic other than nat it.. Unless you were using proxy software pfsense doesn't modify anything..
When you get a new IP from your ISP you never know what the guy that had it before was doing ;)
