Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Netflix vpn block -> how to "fix"?

    Scheduled Pinned Locked Moved General pfSense Questions
    20 Posts 12 Posters 18.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • ?
      Guest
      last edited by

      Hi, i am using a swedish vpn service, watching on the swedish netflix. And i live in sweden.
      But now i cannot watch swedish netflix.

      Netflix is offering different services in different countries world wide and based on this they don´t want
      that their customers are bypassing this by using VPNs. If now your VPN ISP or service is using a Proxy
      server outside of the territory of Sweden you will be not able to watch netflix since the 14, March 2016!

      Since this date they are really sniffing for proxies and VPN connections and block them all and everywhere.

      Seems like Netflix just hit my area with the proxy as it was working normally just a couple days ago. Oddly enough mine only stops my mobile phones, computers work fine.

      I tried your suggested fix on my side to push all Netflix traffic to my normal gateway but no joy. Still detects a proxy somehow.

      Mobile ISPs offers their private clients and customers a service that is behind their own private network
      between the Internet and yours, their customers. So you will be often not able to build VPNs based on this
      networks between you and the Internet, for sure the service they are offering you is faster and more secure
      for you and especially them self then. But if there is any kind of proxy in this game Netflix will also detect them
      now as a proxy and block the service!

      Anyone with ANY ideas.. what can i do.. to prove my current problem is probably is a pfSense/Aliases bug?

      Netflix statement from the 14, March 2016
      Evolving Proxy Detection as a Global Service

      This statement will perhaps be clearing up much more then I would be able to do based on my lower english
      language skills, but it is very clear and simple, with VPN or Porxy Server no Netflix.

      1 Reply Last reply Reply Quote 0
      • KOMK
        KOM
        last edited by

        Still detects a proxy somehow.

        In squid's config, make sure you check Disable Via Header and set X-Forwarded Header Mode to Delete.

        1 Reply Last reply Reply Quote 0
        • F
          FuriousRage
          last edited by

          After adding this list, i have the past 2 days, never been vpn-blocked by netflix, and it seems to work so far
          (I am using swedish netflix, using other countries vpn i dont care of)

          www.netflix.com
          netflix.com
          assets.nflxext.com
          scdn.nflximg.net
          secure.netflix.com
          www2-ext-s.nflximg.net
          so-s.nflximg.net
          www.gstatic.com
          www.netflix.se
          netflix.se
          54.228.203.38
          46.51.174.104
          54.247.109.168
          46.137.156.171
          54.228.199.17
          176.34.97.10
          46.51.170.157
          54.247.124.77
          75.101.139.66
          107.20.154.246
          54.204.2.219
          50.19.210.42
          23.21.190.124
          107.20.151.133
          23.23.191.68
          107.20.177.34
          54.204.43.31
          54.225.192.83
          54.243.253.96
          174.129.2.58
          138.91.252.81
          95.101.96.230
          92.123.204.117
          95.101.96.230
          5.178.46.153
          5.178.46.136
          127.0.0.3
          212.247.20.24
          212.247.20.16
          www.eu-west-1.prodaa.netflix.com
          e8542.dscg.akamaiedge.net

          After adding this to firewall Aliases and excluded that alias from vpn usage, i have loaded many movies on netflix withouth the vpn block message.

          1 Reply Last reply Reply Quote 0
          • N
            nattygreg
            last edited by

            NETFLIX issue solved using PFSENSE

            Disclaimer this is to bypass only Netflix traffic from the VPN all other traffic goes through the VPN

            to prevent dns leak use PiA DNS all other dns I tried showed a multitude of other dns's that belong to them.

            1. create an alias in pfsense called netflix or anything you want. Import all the netflix ip you can find or pm me and I'll post a list of the ones I have.

            2. Go to firewall >>>rules>>>LAN  and edit the default Lan to any rule and change the gateway to your vpn

            3. Still under LAN create a new rule  ACTION>>Pass  INTERFACE>> LAN  ADDRESS FAMILY>>IPV4  PROTOCOL>>TCP  SOURCE>> LanNet  DESINATION>>Netflix (this is the alias and all netflix ip's you have) DESTINATION PORT RANGE>> ANY  DESTINATION OS>> ANY scroll down to gateway and select WAN save it.

            4. Move this rule above the default LAN to any rule

            5. Go to SYSTEM>>ROUTING>>STATIC ROUTES click on add and add this new route to your system

            NETWORK>>Netflix or (whatever you named the alias) GATEWAY>> WAN_DHCP-192.168.1.1 INTERFACE>>>WAN      DESCRIPTION>>>netflix bypass or whatever description you like.

            6. After all your devices contact netflix and is working place the Lan rule you created below the the default lan to any rule so that it does not leak your isp public ip assigned to you.

            1 Reply Last reply Reply Quote 1
            • K
              knight26
              last edited by

              Could this issue with the VPN be blocking my access to the Netflix DVD website? I have an alias setup with a pretty comprehensive list of Netflix ip's that have worked for months to route the streaming traffic around my VPN but I get 502 Bad Gateway error every time I go to the DVD website.  I've added that ip to the white list as well but it hasn't changed anything.

              Hardware:
              GIGABYTE GA-B85M-DS3H-A LGA 1150 Intel M-ATX MB
              Intel Pentium i3-4130T dual core cpu
              Intel Pro 1000 dual port server adapter
              Crucial 8Gb RAM
              Mushkin 60gb SSD

              1 Reply Last reply Reply Quote 0
              • E
                ezrah
                last edited by

                @nattygreg:

                NETFLIX issue solved using PFSENSE

                Disclaimer this is to bypass only Netflix traffic from the VPN all other traffic goes through the VPN

                to prevent dns leak use PiA DNS all other dns I tried showed a multitude of other dns's that belong to them.

                1. create an alias in pfsense called netflix or anything you want. Import all the netflix ip you can find or pm me and I'll post a list of the ones I have.

                2. Go to firewall >>>rules>>>LAN  and edit the default Lan to any rule and change the gateway to your vpn

                3. Still under LAN create a new rule  ACTION>>Pass  INTERFACE>> LAN  ADDRESS FAMILY>>IPV4  PROTOCOL>>TCP  SOURCE>> LanNet  DESINATION>>Netflix (this is the alias and all netflix ip's you have) DESTINATION PORT RANGE>> ANY  DESTINATION OS>> ANY scroll down to gateway and select WAN save it.

                4. Move this rule above the default LAN to any rule

                5. Go to SYSTEM>>ROUTING>>STATIC ROUTES click on add and add this new route to your system

                NETWORK>>Netflix or (whatever you named the alias) GATEWAY>> WAN_DHCP-192.168.1.1 INTERFACE>>>WAN      DESCRIPTION>>>netflix bypass or whatever description you like.

                6. After all your devices contact netflix and is working place the Lan rule you created below the the default lan to any rule so that it does not leak your isp public ip assigned to you.

                Any update on this matter? I did some nslookups on all the addresses found in the chrome console on netflix.com and added those IP's to the aliasses, about 10 to 15 and did every step but i cant get it to work.

                Also I dont quite know if it uses the Interface for the vpn because my vpn client already ran before I added and enabled the VPN interface…

                So if anyone could share some more info on the how to, a bit more detailed or with some screenshots, would be very much appreciated.

                1 Reply Last reply Reply Quote 0
                • N
                  nattygreg
                  last edited by

                  Amids what is written below, there is two solutions since I have run into road blocks myself with Netflix finding my proxy
                  1. is to find a vpn service that uses smartdns or other combaton
                  2. is route your devices via ip address that you want to access Netflix outside your VPN, I know it defeats the purpose but until netflix cave in or we find a better solution that is what I have so far.
                  3. There is hope though but time consuming watch netflix without the vpn for a week, different titles and checking the ips for all kind of different titles, then load them into alias then create a LAN rule any any destination alias and gateway your isp or wan, so what you're telling your firewall is any destination to Netflix only, then and only then you use my wan interface.
                  go to routing and do the same bring up alias as the network and set it to go through your wan interface.

                  ps in the firewall rule set this rule above your vpn rule else it will not work

                  J 1 Reply Last reply Reply Quote 0
                  • KOMK
                    KOM
                    last edited by

                    This is wayyyy too much hassle just to pay for the privilege of watching TV.  If Netflix doesn't have the content you want and they're cracking down on VPNs, then the obvious solution is to cancel your subscription and go back to torrents.  I don't blame Netflix for this.  The greedy content licensing people are holding on to their old model of business for as long as they can, with their carved-up territories and artificial boundaries.

                    1 Reply Last reply Reply Quote 0
                    • J
                      johnevans @nattygreg
                      last edited by

                      @nattygreg I tried 9 VPNs to access American Netflix. Only 2 of them was working, mentioned below are the names:

                      1. PureVPN - It was working perfect
                      2. ExpressVPN - Some IPs got blocked
                      1 Reply Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator
                        last edited by

                        Don't neco threads from 3 years ago. Any VPN you use is going to be a whack-a-mole game.. Thread Locked.

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.