(60) OPERATION TIMED OUT PFSENSE

Rico

Looks not OK to me because mine hits the target.

...
10  156.154.254.11  220.500 ms
    156.154.254.13  232.532 ms
    156.154.254.11  220.060 ms
11  177.153.201.38  227.053 ms
    179.188.31.4  259.502 ms  255.977 ms
12  179.188.36.92  226.512 ms  226.312 ms
    179.188.31.3  264.234 ms
13  179.188.36.92  231.176 ms
    186.202.47.13  223.304 ms
    179.188.36.92  231.715 ms
14  187.45.195.139  229.621 ms  227.874 ms  235.733 ms

-Rico

genilson

What can it be? The internet link?

Rico

Can you show the traceroute from your client machine? In Windows it's tracert
Mine looks like this, still able to hit the target.

...
 11   220 ms   219 ms   218 ms  156.154.254.11
 12   253 ms   253 ms   253 ms  iv1500.g1a.ita.br.as27715.net [179.188.31.3]
 13   230 ms   225 ms   228 ms  dist-fvcg2ita001.locaweb.com.br [179.188.36.92]
 14   257 ms   233 ms   229 ms  186.202.47.14
 15   244 ms   236 ms   232 ms  hm4213.locaweb.com.br [187.45.195.139]

-Rico

genilson

pfSense again...
https://ibb.co/cN4YYZr
My machine
https://ibb.co/MN3md9v

Rico

192.168.1.1 is your pfSense?
What's 192.168.1.254 ?

-Rico

genilson

My pfSense is .254

Rico

Soooo what is 192.168.1.1 ?

-Rico

Rico

Work through https://docs.netgate.com/pfsense/en/latest/routing/unable-to-access-some-websites.html

-Rico

genilson

1.1 is a Router

Rico

Why do you need a router between your machine and pfSense?
Did you try without 192.168.1.1?
Connect your PC to pfSense and try again.

-Rico

genilson

This router is from our VPN link. We do not do VPN through pfSense because our units are rural and there is practically no communication in places, so it is done this way, using a large provider here in the country

genilson

I tried with 2 different links and gave the same problem, I tested another site, like livefootball.com and http://aviculturaindustrial.com.br/ and it is also giving the same problem, and this site worked normally until recently

SteveITS

What is the gateway on your computer, .1 or .254? I wouldn't expect to see two IPs in the same subnet in a traceroute. Your first hop is typically your gateway, and that should hand off to the next router up the chain.

genilson

My gateway is .1. On router .1 there is a rule to transfer all traffic to .254

genilson

The strangest thing that only some sites give the time out

genilson

There is a possibility to reset the pfsense tracked table. Find better routes to navigate?