Can't no access to some websites
-
@Raffi_ said in Can't no access to some websites:
The first post states the latest version but your CLI prompt says 2.4.4. Is it a VM which is swapping between versions?
sorry, i have the 2.4.4 version
i have 3 wan, the problem is in all of them,
This is hardware pfsense, i dont use a VIP -
Upgrade. You're not even on 2.4.4p3.
-
Routing tables
Internet:
Destination Gateway Flags Netif Expire
default 192.168.1.1 UGS re0
dns.google 192.168.1.129 UGHS re2
10.0.8.0/24 10.0.8.2 UGS ovpns2
10.0.8.1 link#36 UHS lo0
10.0.8.2 link#36 UH ovpns2
10.0.14.0/24 ILTK1Winzozz UGS ovpns1
10.0.14.1 link#35 UHS lo0
ILTK1Winzozz link#35 UH ovpns1
10.0.15.0/24 10.0.15.2 UGS ovpns5
10.0.15.1 link#40 UHS lo0
10.0.15.2 link#40 UH ovpns5
10.0.16.0/24 10.0.16.2 UGS ovpns4
10.0.16.1 link#38 UHS lo0
10.0.16.2 link#38 UH ovpns4
10.0.38.0/24 10.0.38.2 UGS ovpns3
10.0.38.1 link#37 UHS lo0
10.0.38.2 link#37 UH ovpns3
10.0.39.0/24 10.0.39.2 UGS ovpns9
10.0.39.1 link#42 UHS lo0
10.0.39.2 link#42 UH ovpns9
ec2-52-59-2-112.eu 192.168.1.1 UGHS re0
ec2-52-59-118-197. 192.168.1.1 UGHS re0
dnsunico.welcomeit 192.168.1.1 UGHS re0
localhost link#9 UH lo0
172.21.3.0/24 link#20 U re3.113
172.21.3.254 link#20 UHS lo0
192.168.1.0/25 link#1 U re0
192.168.1.102 link#1 UHS lo0
192.168.1.128/25 link#4 U re2
192.168.1.130 link#4 UHS lo0
192.168.2.0/24 link#23 U re3.2
fw link#23 UHS lo0
192.168.3.0/24 link#17 U re4.3
192.168.3.254 link#17 UHS lo0
192.168.4.192/26 link#18 U xl0.4
192.168.4.254 link#18 UHS lo0
192.168.5.0/29 link#19 U xl0.5
192.168.5.6 link#19 UHS lo0
192.168.6.0/24 link#21 U re4.6
192.168.6.254 link#21 UHS lo0
192.168.8.0/24 link#6 U re3
wpad link#6 UHS lo0
192.168.9.0/24 link#14 U xl0.9
192.168.9.254 link#14 UHS lo0
192.168.10.0/24 link#12 U xl0.10
192.168.10.254 link#12 UHS lo0
192.168.11.0/24 link#15 U re3.11
192.168.11.254 link#15 UHS lo0
192.168.12.0/24 link#16 U xl0.12
192.168.12.254 link#16 UHS lo0
192.168.13.240/28 link#32 U xl0.13
iPhone-di-Ester link#32 UHS lo0
192.168.14.192/26 link#24 U xl0.14
192.168.14.254 link#24 UHS lo0
192.168.15.240/28 link#27 U re4.15
192.168.15.254 link#27 UHS lo0
192.168.16.0/24 link#28 U re4.16
192.168.16.254 link#28 UHS lo0
192.168.17.0/24 link#29 U re4.17
192.168.17.254 link#29 UHS lo0
192.168.18.0/24 link#33 U re3.18
192.168.18.254 link#33 UHS lo0
192.168.19.224/27 link#30 U re4.19
192.168.19.254 link#30 UHS lo0
192.168.20.0/24 link#31 U xl0.20
fw link#31 UHS lo0
192.168.112.0/24 link#34 U re3.112
192.168.112.254 link#34 UHS lo0
192.168.114.0/24 link#22 U re3.114
192.168.114.254 link#22 UHS lo0
192.168.200.248/29 link#25 U xl0.200
192.168.200.254 link#25 UHS lo0
192.168.201.0/24 link#26 U xl0.201
192.168.201.254 link#26 UHS lo0
resolver2-fs.opend 213-182-68-41.ip.w UGHS re1
resolver2.opendns. 213-182-68-41.ip.w UGHS re1
resolver1.opendns. 192.168.1.1 UGHS re0
213.182.68.40/29 link#3 U re1
213-182-68-42.ip.w link#3 UHS lo0
213-182-68-43.ip.w link#3 UHS lo0
213-182-68-44.ip.w link#3 UHS lo0
213-182-68-45.ip.w link#3 UHS lo0
213-182-68-46.ip.w link#3 UHS lo0
any-in-2678.1e100. 213-182-68-41.ip.w UGHS re1Internet6:
Destination Gateway Flags Netif Expire
localhost link#9 UH lo0
fe80::%re0/64 link#1 U re0
fe80::eade:27ff:fe link#1 UHS lo0
fe80::%re1/64 link#3 U re1
fe80::221:27ff:fec link#3 UHS lo0
fe80::%re2/64 link#4 U re2
fe80::eade:27ff:fe link#4 UHS lo0
fe80::%xl0/64 link#5 U xl0
fe80::20a:5eff:fe7 link#5 UHS lo0
fe80::%re3/64 link#6 U re3
fe80::eade:27ff:fe link#6 UHS lo0
fe80::%re4/64 link#7 U re4
fe80::eade:27ff:fe link#7 UHS lo0
fe80::%lo0/64 link#9 U lo0
fe80::1%lo0 link#9 UHS lo0
fe80::%xl0.10/64 link#12 U xl0.10
fe80::20a:5eff:fe7 link#12 UHS lo0
fe80::%re3.8/64 link#13 U re3.8
fe80::eade:27ff:fe link#13 UHS lo0
fe80::%xl0.9/64 link#14 U xl0.9
fe80::20a:5eff:fe7 link#14 UHS lo0
fe80::%re3.11/64 link#15 U re3.11
fe80::eade:27ff:fe link#15 UHS lo0
fe80::%xl0.12/64 link#16 U xl0.12
fe80::20a:5eff:fe7 link#16 UHS lo0
fe80::%re4.3/64 link#17 U re4.3
fe80::eade:27ff:fe link#17 UHS lo0
fe80::%xl0.4/64 link#18 U xl0.4
fe80::20a:5eff:fe7 link#18 UHS lo0
fe80::%xl0.5/64 link#19 U xl0.5
fe80::20a:5eff:fe7 link#19 UHS lo0
fe80::%re3.113/64 link#20 U re3.113
fe80::eade:27ff:fe link#20 UHS lo0
fe80::%re4.6/64 link#21 U re4.6
fe80::eade:27ff:fe link#21 UHS lo0
fe80::%re3.114/64 link#22 U re3.114
fe80::eade:27ff:fe link#22 UHS lo0
fe80::%re3.2/64 link#23 U re3.2
fe80::eade:27ff:fe link#23 UHS lo0
fe80::%xl0.14/64 link#24 U xl0.14
fe80::20a:5eff:fe7 link#24 UHS lo0
fe80::%xl0.200/64 link#25 U xl0.200
fe80::20a:5eff:fe7 link#25 UHS lo0
fe80::%xl0.201/64 link#26 U xl0.201
fe80::20a:5eff:fe7 link#26 UHS lo0
fe80::%re4.15/64 link#27 U re4.15
fe80::eade:27ff:fe link#27 UHS lo0
fe80::%re4.16/64 link#28 U re4.16
fe80::eade:27ff:fe link#28 UHS lo0
fe80::%re4.17/64 link#29 U re4.17
fe80::eade:27ff:fe link#29 UHS lo0
fe80::%re4.19/64 link#30 U re4.19
fe80::eade:27ff:fe link#30 UHS lo0
fe80::%xl0.20/64 link#31 U xl0.20
fe80::20a:5eff:fe7 link#31 UHS lo0
fe80::%xl0.13/64 link#32 U xl0.13
fe80::20a:5eff:fe7 link#32 UHS lo0
fe80::%re3.18/64 link#33 U re3.18
fe80::eade:27ff:fe link#33 UHS lo0
fe80::%re3.112/64 link#34 U re3.112
fe80::eade:27ff:fe link#34 UHS lo0
fe80::%ovpns1/64 link#35 U ovpns1
fe80::eade:27ff:fe link#35 UHS lo0
fe80::%ovpns2/64 link#36 U ovpns2
fe80::eade:27ff:fe link#36 UHS lo0
fe80::%ovpns3/64 link#37 U ovpns3
fe80::eade:27ff:fe link#37 UHS lo0
fe80::%ovpns4/64 link#38 U ovpns4
fe80::eade:27ff:fe link#38 UHS lo0
fe80::%ovpns6/64 link#39 U ovpns6
fe80::eade:27ff:fe link#39 UHS lo0
fe80::%ovpns5/64 link#40 U ovpns5
fe80::eade:27ff:fe link#40 UHS lo0
fe80::%ovpns7/64 link#41 U ovpns7
fe80::eade:27ff:fe link#41 UHS lo0
fe80::%ovpns9/64 link#42 U ovpns9
fe80::eade:27ff:fe link#42 UHS lo0
fe80::%ovpnc8/64 link#43 U ovpnc8
fe80::eade:27ff:fe link#43 UHS lo0 -
I really don't know what to do, do you advise me to update the system?
-
@EmanueleILTK said in Can't no access to some websites:
default 192.168.1.1 UGS re0
dns.google 192.168.1.129 UGHS re2Well from that.. looks like your sending traffic to google or 8.8.8.8 out a different gateway then what your normal gateway (default) is.
; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;8.8.8.8.in-addr.arpa. IN PTR ;; ANSWER SECTION: 8.8.8.8.in-addr.arpa. 86294 IN PTR dns.google. ;; Query time: 5 msec ;; SERVER: 192.168.3.10#53(192.168.3.10) ;; WHEN: Wed Nov 04 08:57:01 Central Standard Time 2020 ;; MSG SIZE rcvd: 73
So if you can still ping google, but not other stuff.. Points to an issue with your normal gateway.
-
This post is deleted! -
this is my getways
-
And since your using a different gateway for 8.8.8.8 and it works, but something to normal gateway fails.. It shows an issue with your default gateway..
Again what does your log say... If your having issues with a gateway it should be logged..
-
You are using 8.8.8.8 as a monitoring IP for EOLOGW so traffic will always be statically routed that way. That makes it a bad IP to test against.
Steve
-
also if I restart the firewall, vimeo.com is visible for a while, then I return unreachable -.-
-
@stephenw10 why it's a bad IP?
-
Because it's statically routed so it may behave differently to a random IP.
For example if the firewall had no default route or a bad default route you would not be able to reach any public IPs. But 8.8.8.8 would still be reachable because it has a specific route.
Steve
-
@stephenw10 said in Can't no access to some websites:
Because it's statically routed so it may behave differently to a random IP.
ok :)