Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Can't no access to some websites

    Scheduled Pinned Locked Moved General pfSense Questions
    25 Posts 5 Posters 2.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • Raffi_R
      Raffi_ @EmanueleILTK
      last edited by

      @EmanueleILTK said in Can't no access to some websites:

      I have pfsense version 2.4.5_1

      The first post states the latest version but your CLI prompt says 2.4.4. Is it a VM which is swapping between versions?

      1 Reply Last reply Reply Quote 1
      • johnpozJ
        johnpoz LAYER 8 Global Moderator
        last edited by

        ^ good catch ;)

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        1 Reply Last reply Reply Quote 0
        • stephenw10S
          stephenw10 Netgate Administrator
          last edited by

          Failed to reboot after upgrade perhaps?

          1 Reply Last reply Reply Quote 0
          • E
            EmanueleILTK
            last edited by

            @Raffi_ said in Can't no access to some websites:

            The first post states the latest version but your CLI prompt says 2.4.4. Is it a VM which is swapping between versions?

            sorry, i have the 2.4.4 version
            52e40f95-4692-4c1d-aef6-dcedcb78ca44-immagine.png

            i have 3 wan, the problem is in all of them,
            This is hardware pfsense, i dont use a VIP

            1 Reply Last reply Reply Quote 0
            • stephenw10S
              stephenw10 Netgate Administrator
              last edited by

              Upgrade. You're not even on 2.4.4p3.

              1 Reply Last reply Reply Quote 0
              • E
                EmanueleILTK
                last edited by

                Routing tables

                Internet:
                Destination Gateway Flags Netif Expire
                default 192.168.1.1 UGS re0
                dns.google 192.168.1.129 UGHS re2
                10.0.8.0/24 10.0.8.2 UGS ovpns2
                10.0.8.1 link#36 UHS lo0
                10.0.8.2 link#36 UH ovpns2
                10.0.14.0/24 ILTK1Winzozz UGS ovpns1
                10.0.14.1 link#35 UHS lo0
                ILTK1Winzozz link#35 UH ovpns1
                10.0.15.0/24 10.0.15.2 UGS ovpns5
                10.0.15.1 link#40 UHS lo0
                10.0.15.2 link#40 UH ovpns5
                10.0.16.0/24 10.0.16.2 UGS ovpns4
                10.0.16.1 link#38 UHS lo0
                10.0.16.2 link#38 UH ovpns4
                10.0.38.0/24 10.0.38.2 UGS ovpns3
                10.0.38.1 link#37 UHS lo0
                10.0.38.2 link#37 UH ovpns3
                10.0.39.0/24 10.0.39.2 UGS ovpns9
                10.0.39.1 link#42 UHS lo0
                10.0.39.2 link#42 UH ovpns9
                ec2-52-59-2-112.eu 192.168.1.1 UGHS re0
                ec2-52-59-118-197. 192.168.1.1 UGHS re0
                dnsunico.welcomeit 192.168.1.1 UGHS re0
                localhost link#9 UH lo0
                172.21.3.0/24 link#20 U re3.113
                172.21.3.254 link#20 UHS lo0
                192.168.1.0/25 link#1 U re0
                192.168.1.102 link#1 UHS lo0
                192.168.1.128/25 link#4 U re2
                192.168.1.130 link#4 UHS lo0
                192.168.2.0/24 link#23 U re3.2
                fw link#23 UHS lo0
                192.168.3.0/24 link#17 U re4.3
                192.168.3.254 link#17 UHS lo0
                192.168.4.192/26 link#18 U xl0.4
                192.168.4.254 link#18 UHS lo0
                192.168.5.0/29 link#19 U xl0.5
                192.168.5.6 link#19 UHS lo0
                192.168.6.0/24 link#21 U re4.6
                192.168.6.254 link#21 UHS lo0
                192.168.8.0/24 link#6 U re3
                wpad link#6 UHS lo0
                192.168.9.0/24 link#14 U xl0.9
                192.168.9.254 link#14 UHS lo0
                192.168.10.0/24 link#12 U xl0.10
                192.168.10.254 link#12 UHS lo0
                192.168.11.0/24 link#15 U re3.11
                192.168.11.254 link#15 UHS lo0
                192.168.12.0/24 link#16 U xl0.12
                192.168.12.254 link#16 UHS lo0
                192.168.13.240/28 link#32 U xl0.13
                iPhone-di-Ester link#32 UHS lo0
                192.168.14.192/26 link#24 U xl0.14
                192.168.14.254 link#24 UHS lo0
                192.168.15.240/28 link#27 U re4.15
                192.168.15.254 link#27 UHS lo0
                192.168.16.0/24 link#28 U re4.16
                192.168.16.254 link#28 UHS lo0
                192.168.17.0/24 link#29 U re4.17
                192.168.17.254 link#29 UHS lo0
                192.168.18.0/24 link#33 U re3.18
                192.168.18.254 link#33 UHS lo0
                192.168.19.224/27 link#30 U re4.19
                192.168.19.254 link#30 UHS lo0
                192.168.20.0/24 link#31 U xl0.20
                fw link#31 UHS lo0
                192.168.112.0/24 link#34 U re3.112
                192.168.112.254 link#34 UHS lo0
                192.168.114.0/24 link#22 U re3.114
                192.168.114.254 link#22 UHS lo0
                192.168.200.248/29 link#25 U xl0.200
                192.168.200.254 link#25 UHS lo0
                192.168.201.0/24 link#26 U xl0.201
                192.168.201.254 link#26 UHS lo0
                resolver2-fs.opend 213-182-68-41.ip.w UGHS re1
                resolver2.opendns. 213-182-68-41.ip.w UGHS re1
                resolver1.opendns. 192.168.1.1 UGHS re0
                213.182.68.40/29 link#3 U re1
                213-182-68-42.ip.w link#3 UHS lo0
                213-182-68-43.ip.w link#3 UHS lo0
                213-182-68-44.ip.w link#3 UHS lo0
                213-182-68-45.ip.w link#3 UHS lo0
                213-182-68-46.ip.w link#3 UHS lo0
                any-in-2678.1e100. 213-182-68-41.ip.w UGHS re1

                Internet6:
                Destination Gateway Flags Netif Expire
                localhost link#9 UH lo0
                fe80::%re0/64 link#1 U re0
                fe80::eade:27ff:fe link#1 UHS lo0
                fe80::%re1/64 link#3 U re1
                fe80::221:27ff:fec link#3 UHS lo0
                fe80::%re2/64 link#4 U re2
                fe80::eade:27ff:fe link#4 UHS lo0
                fe80::%xl0/64 link#5 U xl0
                fe80::20a:5eff:fe7 link#5 UHS lo0
                fe80::%re3/64 link#6 U re3
                fe80::eade:27ff:fe link#6 UHS lo0
                fe80::%re4/64 link#7 U re4
                fe80::eade:27ff:fe link#7 UHS lo0
                fe80::%lo0/64 link#9 U lo0
                fe80::1%lo0 link#9 UHS lo0
                fe80::%xl0.10/64 link#12 U xl0.10
                fe80::20a:5eff:fe7 link#12 UHS lo0
                fe80::%re3.8/64 link#13 U re3.8
                fe80::eade:27ff:fe link#13 UHS lo0
                fe80::%xl0.9/64 link#14 U xl0.9
                fe80::20a:5eff:fe7 link#14 UHS lo0
                fe80::%re3.11/64 link#15 U re3.11
                fe80::eade:27ff:fe link#15 UHS lo0
                fe80::%xl0.12/64 link#16 U xl0.12
                fe80::20a:5eff:fe7 link#16 UHS lo0
                fe80::%re4.3/64 link#17 U re4.3
                fe80::eade:27ff:fe link#17 UHS lo0
                fe80::%xl0.4/64 link#18 U xl0.4
                fe80::20a:5eff:fe7 link#18 UHS lo0
                fe80::%xl0.5/64 link#19 U xl0.5
                fe80::20a:5eff:fe7 link#19 UHS lo0
                fe80::%re3.113/64 link#20 U re3.113
                fe80::eade:27ff:fe link#20 UHS lo0
                fe80::%re4.6/64 link#21 U re4.6
                fe80::eade:27ff:fe link#21 UHS lo0
                fe80::%re3.114/64 link#22 U re3.114
                fe80::eade:27ff:fe link#22 UHS lo0
                fe80::%re3.2/64 link#23 U re3.2
                fe80::eade:27ff:fe link#23 UHS lo0
                fe80::%xl0.14/64 link#24 U xl0.14
                fe80::20a:5eff:fe7 link#24 UHS lo0
                fe80::%xl0.200/64 link#25 U xl0.200
                fe80::20a:5eff:fe7 link#25 UHS lo0
                fe80::%xl0.201/64 link#26 U xl0.201
                fe80::20a:5eff:fe7 link#26 UHS lo0
                fe80::%re4.15/64 link#27 U re4.15
                fe80::eade:27ff:fe link#27 UHS lo0
                fe80::%re4.16/64 link#28 U re4.16
                fe80::eade:27ff:fe link#28 UHS lo0
                fe80::%re4.17/64 link#29 U re4.17
                fe80::eade:27ff:fe link#29 UHS lo0
                fe80::%re4.19/64 link#30 U re4.19
                fe80::eade:27ff:fe link#30 UHS lo0
                fe80::%xl0.20/64 link#31 U xl0.20
                fe80::20a:5eff:fe7 link#31 UHS lo0
                fe80::%xl0.13/64 link#32 U xl0.13
                fe80::20a:5eff:fe7 link#32 UHS lo0
                fe80::%re3.18/64 link#33 U re3.18
                fe80::eade:27ff:fe link#33 UHS lo0
                fe80::%re3.112/64 link#34 U re3.112
                fe80::eade:27ff:fe link#34 UHS lo0
                fe80::%ovpns1/64 link#35 U ovpns1
                fe80::eade:27ff:fe link#35 UHS lo0
                fe80::%ovpns2/64 link#36 U ovpns2
                fe80::eade:27ff:fe link#36 UHS lo0
                fe80::%ovpns3/64 link#37 U ovpns3
                fe80::eade:27ff:fe link#37 UHS lo0
                fe80::%ovpns4/64 link#38 U ovpns4
                fe80::eade:27ff:fe link#38 UHS lo0
                fe80::%ovpns6/64 link#39 U ovpns6
                fe80::eade:27ff:fe link#39 UHS lo0
                fe80::%ovpns5/64 link#40 U ovpns5
                fe80::eade:27ff:fe link#40 UHS lo0
                fe80::%ovpns7/64 link#41 U ovpns7
                fe80::eade:27ff:fe link#41 UHS lo0
                fe80::%ovpns9/64 link#42 U ovpns9
                fe80::eade:27ff:fe link#42 UHS lo0
                fe80::%ovpnc8/64 link#43 U ovpnc8
                fe80::eade:27ff:fe link#43 UHS lo0

                1 Reply Last reply Reply Quote 0
                • E
                  EmanueleILTK
                  last edited by

                  I really don't know what to do, do you advise me to update the system?

                  1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator
                    last edited by

                    @EmanueleILTK said in Can't no access to some websites:

                    default 192.168.1.1 UGS re0
                    dns.google 192.168.1.129 UGHS re2

                    Well from that.. looks like your sending traffic to google or 8.8.8.8 out a different gateway then what your normal gateway (default) is.

                    ; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;8.8.8.8.in-addr.arpa.          IN      PTR

;; ANSWER SECTION:
8.8.8.8.in-addr.arpa.   86294   IN      PTR     dns.google.

;; Query time: 5 msec
;; SERVER: 192.168.3.10#53(192.168.3.10)
;; WHEN: Wed Nov 04 08:57:01 Central Standard Time 2020
;; MSG SIZE  rcvd: 73

                    So if you can still ping google, but not other stuff.. Points to an issue with your normal gateway.

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                    1 Reply Last reply Reply Quote 0
                    • E
                      EmanueleILTK
                      last edited by EmanueleILTK

                      This post is deleted!
                      1 Reply Last reply Reply Quote 0
                      • E
                        EmanueleILTK
                        last edited by

                        this is my getways
                        da378751-a208-4a7a-81d0-14d6d0f7adde-immagine.png

                        1 Reply Last reply Reply Quote 0
                        • johnpozJ
                          johnpoz LAYER 8 Global Moderator
                          last edited by

                          And since your using a different gateway for 8.8.8.8 and it works, but something to normal gateway fails.. It shows an issue with your default gateway..

                          Again what does your log say... If your having issues with a gateway it should be logged..

                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                          If you get confused: Listen to the Music Play
                          Please don't Chat/PM me for help, unless mod related
                          SG-4860 24.11 | Lab VMs 2.8, 24.11

                          1 Reply Last reply Reply Quote 0
                          • stephenw10S
                            stephenw10 Netgate Administrator
                            last edited by

                            You are using 8.8.8.8 as a monitoring IP for EOLOGW so traffic will always be statically routed that way. That makes it a bad IP to test against.

                            Steve

                            E 1 Reply Last reply Reply Quote 0
                            • E
                              EmanueleILTK
                              last edited by

                              also if I restart the firewall, vimeo.com is visible for a while, then I return unreachable -.-

                              1 Reply Last reply Reply Quote 0
                              • E
                                EmanueleILTK @stephenw10
                                last edited by

                                @stephenw10 why it's a bad IP?

                                1 Reply Last reply Reply Quote 0
                                • stephenw10S
                                  stephenw10 Netgate Administrator
                                  last edited by stephenw10

                                  Because it's statically routed so it may behave differently to a random IP.

                                  For example if the firewall had no default route or a bad default route you would not be able to reach any public IPs. But 8.8.8.8 would still be reachable because it has a specific route.

                                  Steve

                                  E 1 Reply Last reply Reply Quote 0
                                  • E
                                    EmanueleILTK @stephenw10
                                    last edited by

                                    @stephenw10 said in Can't no access to some websites:

                                    Because it's statically routed so it may behave differently to a random IP.

                                    ok :)

                                    1 Reply Last reply Reply Quote 0
                                    • First post
                                      Last post
                                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.