NTP - poor reach after 20 hours

AKEGEC

@farmerjohn smart move to use Quad9 DNS, it blocks a lot malicious sites.

johnpoz

Those are all out of state blocks.. see the R and Fs those are RST and FIN packets.. Those are what close a session. If the session has already been closed then those would be blocked. etc..

But why are you seeing them on opt1? And your hiding what I assume is your public IP that ends in .37 there? Why would that traffic be inbound to opt1? Is that .37 IP your hiding a rfc1918 address on your internal network?

farmerjohn

@johnpoz

ip that ends in .37 is my public IP.

Why would that traffic be inbound to opt1?

i wish i could answer that.

here is a short sample of tcpdump, I'm terrible at interpreting this, but posted here in case something obvious.

17:45:02.408011 IP (tos 0x0, ttl 255, id 43242, offset 0, flags [none], proto UDP (17), length 76)
    my.public.ip.037.res.spectrum.com.62388 > time-a-b.nist.gov.ntp: [udp sum ok] NTPv4, length 48
	Client, Leap indicator:  (0), Stratum 0 (unspecified), poll 0 (1s), precision 0
	Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: (unspec)
	  Reference Timestamp:  0.000000000
	  Originator Timestamp: 0.000000000
	  Receive Timestamp:    0.000000000
	  Transmit Timestamp:   0.000000000
	    Originator - Receive Timestamp:  0.000000000
	    Originator - Transmit Timestamp: 0.000000000
17:45:02.449490 IP (tos 0x0, ttl 48, id 27186, offset 0, flags [none], proto UDP (17), length 76)
    time-a-b.nist.gov.ntp > my.public.ip.037.res.spectrum.com.62388: [udp sum ok] NTPv3, length 48
	Server, Leap indicator:  (0), Stratum 1 (primary reference), poll 13 (8192s), precision -29
	Root Delay: 0.000244, Root dispersion: 0.000488, Reference-ID: NIST
	  Reference Timestamp:  3827598208.000000000 (2021/04/16 17:43:28)
	  Originator Timestamp: 0.000000000
	  Receive Timestamp:    3827598302.430281727 (2021/04/16 17:45:02)
	  Transmit Timestamp:   3827598302.430282955 (2021/04/16 17:45:02)
	    Originator - Receive Timestamp:  3827598302.430281727 (2021/04/16 17:45:02)
	    Originator - Transmit Timestamp: 3827598302.430282955 (2021/04/16 17:45:02)

johnpoz

@farmerjohn said in NTP - poor reach after 20 hours:

i wish i could answer that.

OPT1 is what interface? And why would the source of the traffic "into" opt1 be your public IP? That makes ZERO sense..

How would you be seeing inbound traffic into a lan side interface with your public IP On it???

I don't even see how that would be possible???

AKEGEC

@farmerjohn Things are not always what they seem. It doesn't mean that China hits on you, it could be some bad actors who work at your local bank or organization and use China's network. Johnpoz is right, it's very strange inbound connections on OPT1.

Just a suggestion, you could make a new outbound floating rules with selected all interfaces and blocks China networks. In your case, make two aliases, one for ChinaNet and the other ChinaUnicorn. After that see firewall log, which interfaces are blocked.

ChinaNet:

1.180.0.0/14 
1.192.0.0/13 
1.204.0.0/14 
1.48.0.0/15 
1.50.0.0/16 
1.68.0.0/14 
1.80.0.0/13 
1.92.0.0/20 
101.248.0.0/15 
101.248.0.0/16 
103.8.32.0/24 
106.0.4.0/22 
106.108.0.0/15 
106.110.0.0/15 
106.112.0.0/14 
106.112.0.0/16 
106.113.0.0/16 
106.114.0.0/16 
106.115.0.0/16 
106.116.0.0/15 
106.116.0.0/16 
106.117.0.0/16 
106.118.0.0/16 
106.119.0.0/16 
106.122.0.0/16 
106.123.0.0/16 
106.124.0.0/16 
106.125.0.0/16 
106.126.0.0/16 
106.127.0.0/16 
106.16.0.0/15 
106.18.0.0/15 
106.224.0.0/14 
106.228.0.0/16 
106.229.0.0/16 
106.230.0.0/16 
106.32.0.0/16 
106.33.0.0/16 
106.34.0.0/16 
106.35.0.0/16 
106.36.0.0/16 
106.4.0.0/15 
106.40.0.0/16 
106.41.0.0/16 
106.42.0.0/16 
106.43.0.0/16 
106.44.0.0/16 
106.45.0.0/16 
106.46.0.0/16 
106.56.0.0/15 
106.58.0.0/15 
106.6.0.0/16 
106.60.0.0/15 
106.62.0.0/16 
106.7.0.0/16 
106.8.0.0/16 
106.80.0.0/15 
106.82.0.0/15 
106.84.0.0/15 
106.86.0.0/15 
106.88.0.0/15 
106.9.0.0/16 
106.90.0.0/15 
106.92.0.0/16 
110.152.0.0/14 
110.156.0.0/15 
110.166.0.0/15 
110.176.0.0/13 
110.184.0.0/13 
110.190.90.0/24 
110.190.91.0/24 
110.190.92.0/24 
110.190.94.0/24 
110.80.0.0/13 
110.88.0.0/14 
111.112.0.0/15 
111.120.0.0/14 
111.124.0.0/16 
111.126.0.0/15 
111.170.0.0/16 
111.172.0.0/14 
111.176.0.0/13 
111.224.0.0/14 
111.72.0.0/13 
112.100.0.0/14 
112.112.0.0/14 
112.112.162.0/24 
112.116.0.0/15 
112.66.0.0/15 
112.98.0.0/15 
113.112.0.0/13 
113.12.0.0/14 
113.120.0.0/13 
113.128.0.0/15 
113.132.0.0/14 
113.136.0.0/13 
113.16.0.0/15 
113.214.0.0/15 
113.218.0.0/15 
113.220.0.0/14 
113.24.0.0/14 
113.240.0.0/13 
113.248.0.0/14 
113.59.224.0/22 
113.62.0.0/15 
113.64.0.0/11 
113.96.0.0/12 
114.104.0.0/14 
114.113.250.0/24 
114.114.112.0/21 
114.135.0.0/16 
114.138.0.0/15 
114.216.0.0/13 
114.224.0.0/12 
114.96.0.0/13 
115.148.0.0/14 
115.152.0.0/15 
115.168.0.0/14 
115.168.0.0/17 
115.168.0.0/18 
115.168.32.0/19 
115.168.56.0/24 
115.168.64.0/19 
115.169.0.0/16 
115.170.0.0/16 
115.192.0.0/11 
115.224.0.0/12 
116.1.0.0/16 
116.16.0.0/12 
116.207.0.0/16 
116.208.0.0/14 
116.248.0.0/15 
116.252.0.0/15 
116.4.0.0/14 
116.52.0.0/14 
116.69.0.0/16 
116.8.0.0/14 
117.21.0.0/16 
117.22.0.0/15 
117.24.0.0/13 
117.32.0.0/13 
117.40.0.0/14 
117.44.0.0/15 
117.57.0.0/16 
117.60.0.0/14 
117.64.0.0/13 
117.79.80.0/20 
117.80.0.0/12 
117.80.0.0/13 
118.103.244.0/22 
118.112.0.0/13 
118.120.0.0/14 
118.124.0.0/15 
118.180.0.0/14 
118.184.152.0/21 
118.186.0.0/15 
118.192.0.0/16 
118.213.0.0/16 
118.215.192.0/19 
118.239.0.0/16 
118.248.0.0/13 
118.84.0.0/15 
118.85.205.0/24 
118.85.215.0/24 
119.0.0.0/15 
119.120.0.0/13 
119.128.0.0/12 
119.144.0.0/14 
119.20.0.0/15 
119.37.192.0/21 
119.41.0.0/16 
119.60.0.0/16 
119.84.0.0/14 
119.96.0.0/13 
120.31.128.0/20 
120.31.66.0/23 
120.31.68.0/22 
120.32.0.0/13 
120.40.0.0/14 
120.68.0.0/14 
121.201.0.0/17 
121.204.0.0/14 
121.224.0.0/12 
121.32.0.0/14 
121.56.0.0/15 
121.58.0.0/17 
121.59.0.0/23 
121.60.0.0/14 
121.8.0.0/13 
122.10.0.0/17 
122.102.94.0/23 
122.224.0.0/12 
122.229.8.0/22 
122.240.0.0/13 
122.4.0.0/14 
123.101.0.0/16 
123.137.0.0/16 
123.149.0.0/16 
123.160.0.0/14 
123.164.0.0/14 
123.168.0.0/14 
123.172.0.0/15 
123.174.0.0/15 
123.177.0.0/16 
123.178.0.0/15 
123.180.0.0/14 
123.184.0.0/14 
123.197.0.0/17 
123.244.0.0/14 
123.52.0.0/14 
123.96.0.0/15 
124.112.0.0/15 
124.114.0.0/15 
124.115.0.0/16 
124.116.0.0/16 
124.117.0.0/16 
124.118.0.0/15 
124.172.0.0/15 
124.224.0.0/16 
124.225.0.0/16 
124.226.0.0/15 
124.227.128.0/17 
124.228.0.0/14 
124.232.0.0/15 
124.234.0.0/15 
124.236.0.0/14 
124.29.0.0/17 
124.31.0.0/16 
124.72.0.0/16 
124.73.0.0/16 
124.74.0.0/15 
124.76.0.0/14 
125.104.0.0/13 
125.112.0.0/12 
125.171.0.0/16 
125.210.0.0/16 
125.64.0.0/13 
125.72.0.0/16 
125.73.0.0/16 
125.74.0.0/15 
125.76.0.0/17 
125.76.128.0/17 
125.77.0.0/16 
125.78.0.0/15 
125.80.0.0/13 
125.88.0.0/13 
139.189.0.0/16 
139.200.0.0/16 
139.201.0.0/16 
139.202.0.0/16 
139.203.0.0/16 
139.204.0.0/15 
139.206.0.0/16 
139.207.0.0/16 
14.104.0.0/13 
14.112.0.0/12 
14.134.0.0/15 
14.144.0.0/12 
14.16.0.0/12 
14.208.0.0/12 
140.224.0.0/16 
140.237.0.0/16 
140.240.0.0/16 
140.243.0.0/16 
140.249.0.0/16 
140.250.0.0/16 
140.255.0.0/16 
140.75.0.0/16 
144.0.0.0/16 
144.12.0.0/16 
144.123.0.0/16 
144.123.32.0/19 
144.255.0.0/16 
144.52.0.0/16 
144.7.0.0/17 
146.222.79.0/24 
146.222.81.0/24 
146.222.94.0/24 
147.78.134.0/23 
150.138.0.0/15 
153.118.0.0/15 
154.72.44.0/24 
157.119.72.0/24 
171.10.0.0/15 
171.10.0.0/16 
171.104.0.0/14 
171.104.0.0/16 
171.108.0.0/16 
171.109.0.0/16 
171.11.0.0/16 
171.110.0.0/16 
171.111.0.0/16 
171.112.0.0/15 
171.114.0.0/15 
171.12.0.0/16 
171.13.0.0/16 
171.14.0.0/16 
171.15.0.0/16 
171.208.0.0/12 
171.40.0.0/15 
171.42.0.0/16 
171.43.0.0/16 
171.44.0.0/16 
171.8.0.0/15 
171.80.0.0/14 
171.88.0.0/13 
175.0.0.0/12 
175.30.0.0/15 
180.136.0.0/13 
180.96.0.0/11 
182.128.0.0/12 
182.144.0.0/13 
182.145.192.0/23 
182.145.194.0/24 
182.200.0.0/13 
182.240.0.0/13 
182.32.0.0/12 
182.84.0.0/14 
182.96.0.0/12 
183.0.0.0/10 
183.128.0.0/11 
183.160.0.0/13 
183.64.0.0/13 
183.78.180.0/22 
183.91.40.0/21 
183.91.44.0/24 
183.91.56.0/24 
202.100.0.0/18 
202.100.128.0/19 
202.100.160.0/19 
202.100.192.0/18 
202.100.64.0/19 
202.100.96.0/19 
202.101.0.0/18 
202.101.128.0/19 
202.101.160.0/19 
202.101.192.0/18 
202.101.64.0/19 
202.101.96.0/19 
202.102.0.0/17 
202.102.192.0/19 
202.103.0.0/18 
202.103.128.0/18 
202.103.192.0/18 
202.103.64.0/18 
202.104.0.0/15 
202.105.0.0/16 
202.107.128.0/18 
202.107.192.0/18 
202.109.0.0/17 
202.109.128.0/18 
202.109.192.0/18 
202.110.128.0/18 
202.111.0.0/17 
202.111.192.0/18 
202.111.192.0/19 
202.125.176.0/20 
202.130.248.0/21 
202.141.160.0/20 
202.173.224.0/19 
202.180.128.0/19 
202.59.214.0/24 
202.60.132.0/22 
202.62.112.0/22 
202.73.128.0/22 
202.75.216.0/22 
202.75.220.0/22 
202.80.192.0/22 
202.91.240.0/21 
202.91.248.0/22 
202.96.112.0/20 
202.96.128.0/18 
202.96.96.0/20 
202.97.0.0/19 
202.97.11.0/24 
202.97.3.0/24 
202.97.32.0/19 
202.97.62.0/24 
202.97.80.0/20 
202.97.96.0/19 
202.98.128.0/19 
202.98.160.0/19 
202.98.192.0/19 
202.98.224.0/19 
202.98.32.0/19 
202.98.64.0/19 
202.98.96.0/19 
203.0.104.0/21 
203.110.208.0/20 
203.110.232.0/23 
203.119.114.0/23 
203.148.86.0/23 
203.161.192.0/19 
203.170.58.0/23 
203.175.192.0/18 
203.191.144.0/21 
203.191.25.0/24 
203.2.64.0/21 
203.207.200.0/22 
203.215.232.0/24 
203.215.233.0/24 
203.215.235.0/24 
203.215.236.0/24 
203.25.208.0/20 
203.34.106.0/24 
203.34.113.0/24 
203.34.147.0/24 
203.34.150.0/24 
203.34.161.0/24 
203.34.162.0/24 
203.34.187.0/24 
203.34.21.0/24 
203.34.232.0/24 
203.34.240.0/24 
203.34.242.0/24 
203.34.245.0/24 
203.34.251.0/24 
203.34.27.0/24 
203.34.39.0/24 
203.34.4.0/24 
203.34.54.0/24 
203.34.67.0/24 
203.34.69.0/24 
203.34.76.0/24 
203.62.131.0/24 
203.62.139.0/24 
203.62.2.0/24 
203.86.0.0/19 
203.88.192.0/19 
210.185.192.0/18 
210.25.0.0/17 
210.73.128.0/19 
210.73.192.0/19 
210.74.224.0/19 
210.75.0.0/18 
210.75.0.0/19 
210.75.32.0/19 
210.76.64.0/19 
210.77.160.0/20 
211.102.80.0/20 
211.144.160.0/20 
211.147.224.0/19 
211.148.128.0/19 
211.152.160.0/19 
211.152.64.0/19 
211.155.16.0/20 
211.155.224.0/21 
211.156.112.0/20 
211.156.176.0/20 
211.156.240.0/20 
211.159.64.0/20 
211.167.0.0/20 
211.167.16.0/22 
211.88.0.0/16 
218.0.0.0/16 
218.108.0.0/15 
218.13.0.0/16 
218.14.0.0/15 
218.16.0.0/14 
218.2.0.0/16 
218.20.0.0/16 
218.21.0.0/19 
218.21.32.0/20 
218.21.48.0/20 
218.21.64.0/18 
218.22.0.0/15 
218.240.0.0/18 
218.3.0.0/16 
218.30.0.0/15 
218.30.0.0/20 
218.30.128.0/19 
218.30.130.0/23 
218.30.139.0/24 
218.30.146.0/23 
218.30.158.0/24 
218.30.16.0/22 
218.30.160.0/19 
218.30.167.0/24 
218.30.168.0/24 
218.30.20.0/22 
218.30.224.0/19 
218.30.30.0/23 
218.30.33.0/24 
218.30.34.0/24 
218.30.36.0/24 
218.30.53.0/24 
218.30.56.0/24 
218.30.58.0/24 
218.30.60.0/24 
218.30.61.0/24 
218.30.66.0/23 
218.30.80.0/22 
218.30.84.0/23 
218.31.0.0/16 
218.4.0.0/16 
218.5.0.0/16 
218.6.0.0/17 
218.6.128.0/17 
218.62.128.0/17 
218.62.128.0/19 
218.62.160.0/19 
218.62.192.0/19 
218.62.224.0/19 
218.63.0.0/16 
218.64.0.0/16 
218.65.0.0/17 
218.65.128.0/17 
218.65.144.0/20 
218.66.0.0/16 
218.67.0.0/17 
218.70.0.0/16 
218.71.0.0/16 
218.72.0.0/15 
218.74.0.0/16 
218.74.17.0/24 
218.75.0.0/17 
218.75.128.0/17 
218.76.0.0/16 
218.77.0.0/17 
218.77.126.0/23 
218.77.128.0/17 
218.84.0.0/16 
218.85.0.0/16 
218.86.0.0/17 
218.86.128.0/17 
218.87.0.0/16 
218.88.0.0/16 
218.89.0.0/16 
218.90.0.0/16 
218.91.0.0/16 
218.92.0.0/16 
218.93.0.0/16 
218.94.0.0/16 
218.95.0.0/17 
218.95.128.0/18 
218.95.192.0/19 
218.95.224.0/19 
218.97.0.0/23 
219.128.0.0/13 
219.136.0.0/15 
219.138.0.0/15 
219.140.0.0/16 
219.141.0.0/17 
219.144.0.0/15 
219.144.0.0/16 
219.145.0.0/16 
219.146.0.0/16 
219.146.24.0/22 
219.147.0.0/17 
219.147.128.0/17 
219.147.32.0/20 
219.148.0.0/17 
219.148.128.0/19 
219.148.160.0/19 
219.148.192.0/18 
219.148.215.0/24 
219.149.0.0/17 
219.149.128.0/18 
219.149.192.0/18 
219.150.0.0/19 
219.150.112.0/20 
219.150.128.0/17 
219.151.0.0/18 
219.151.0.0/19 
219.151.128.0/17 
219.151.32.0/19 
219.152.0.0/15 
219.159.128.0/17 
219.159.64.0/18 
219.82.0.0/16 
220.160.0.0/15 
220.162.0.0/16 
220.163.0.0/16 
220.164.0.0/15 
220.166.0.0/16 
220.167.0.0/17 
220.167.128.0/17 
220.168.0.0/15 
220.170.0.0/16 
220.171.0.0/17 
220.171.128.0/18 
220.171.192.0/18 
220.172.0.0/16 
220.173.0.0/16 
220.174.0.0/16 
220.175.0.0/16 
220.176.0.0/15 
220.178.0.0/15 
220.180.0.0/16 
220.181.0.0/16 
220.182.0.0/18 
220.184.0.0/13 
220.231.128.0/17 
221.136.0.0/16 
221.224.0.0/13 
221.231.151.0/24 
221.232.0.0/14 
221.236.0.0/16 
221.237.0.0/16 
222.168.0.0/15 
222.170.0.0/15 
222.172.0.0/17 
222.172.128.0/17 
222.173.0.0/16 
222.174.0.0/15 
222.176.0.0/13 
222.184.0.0/13 
222.208.0.0/13 
222.216.0.0/15 
222.218.0.0/16 
222.219.0.0/16 
222.220.0.0/15 
222.222.0.0/15 
222.240.0.0/13 
222.74.0.0/16 
222.75.0.0/16 
222.76.0.0/14 
222.80.0.0/15 
222.82.0.0/16 
222.83.0.0/17 
222.83.128.0/17 
222.84.0.0/16 
222.85.0.0/17 
222.85.128.0/17 
222.86.0.0/15 
222.88.0.0/15 
222.90.0.0/15 
222.91.0.0/16 
222.92.0.0/14 
223.144.0.0/12 
223.198.0.0/15 
223.214.0.0/15 
223.220.0.0/15 
223.240.0.0/13 
223.8.0.0/13 
27.128.0.0/15 
27.148.0.0/14 
27.152.0.0/13 
27.16.0.0/12 
27.184.0.0/13 
27.224.0.0/14 
27.54.224.0/19 
36.1.0.0/16 
36.100.0.0/16 
36.101.0.0/16 
36.102.0.0/16 
36.103.0.0/16 
36.104.0.0/16 
36.105.0.0/16 
36.106.0.0/16 
36.107.0.0/16 
36.108.0.0/16 
36.109.0.0/16 
36.111.0.0/16 
36.111.72.0/21 
36.112.13.0/24 
36.16.0.0/12 
36.4.0.0/14 
36.40.0.0/14 
36.44.0.0/15 
36.46.0.0/16 
36.47.0.0/16 
36.48.0.0/16 
36.49.0.0/16 
36.56.0.0/14 
36.60.0.0/15 
36.62.0.0/15 
36.96.0.0/16 
36.97.0.0/16 
36.98.0.0/16 
36.99.0.0/16 
42.100.0.0/15 
42.102.0.0/16 
42.103.0.0/16 
42.184.0.0/16 
42.185.0.0/16 
42.202.0.0/15 
42.242.0.0/15 
42.248.0.0/15 
42.88.0.0/15 
42.90.0.0/15 
42.92.0.0/15 
42.94.0.0/16 
42.95.0.0/16 
42.97.0.0/16 
42.99.0.0/18 
49.112.0.0/13 
49.64.0.0/11 
49.90.0.0/15 
5.154.144.0/22 
58.100.0.0/15 
58.208.0.0/12 
58.210.230.0/23 
58.215.13.0/24 
58.32.0.0/13 
58.40.0.0/15 
58.42.0.0/16 
58.43.0.0/16 
58.44.0.0/14 
58.48.0.0/13 
58.56.0.0/15 
58.58.0.0/16 
58.59.0.0/17 
58.59.128.0/17 
58.60.0.0/14 
58.66.0.0/15 
58.99.128.0/17 
59.107.0.0/17 
59.172.0.0/14 
59.32.0.0/13 
59.40.0.0/15 
59.42.0.0/16 
59.44.0.0/14 
59.48.0.0/16 
59.49.0.0/17 
59.49.128.0/17 
59.50.0.0/16 
59.51.0.0/17 
59.51.128.0/17 
59.52.0.0/14 
59.56.0.0/14 
59.60.0.0/15 
59.62.0.0/15 
59.82.64.0/18 
59.83.128.0/18 
60.160.0.0/15 
60.162.0.0/15 
60.164.0.0/15 
60.166.0.0/15 
60.168.0.0/13 
60.176.0.0/12 
60.235.0.0/16 
60.55.0.0/16 
61.128.0.0/17 
61.128.128.0/17 
61.130.0.0/16 
61.131.0.0/17 
61.131.128.0/17 
61.132.0.0/17 
61.132.128.0/17 
61.133.128.0/18 
61.133.192.0/19 
61.133.224.0/19 
61.134.0.0/18 
61.134.64.0/19 
61.136.128.0/17 
61.137.0.0/17 
61.137.0.0/19 
61.137.126.0/24 
61.137.32.0/20 
61.137.48.0/21 
61.137.56.0/22 
61.138.192.0/19 
61.138.224.0/19 
61.139.0.0/17 
61.139.192.0/18 
61.139.192.0/20 
61.140.0.0/14 
61.144.0.0/15 
61.146.0.0/16 
61.147.0.0/16 
61.150.0.0/17 
61.150.128.0/17 
61.153.0.0/16 
61.154.0.0/16 
61.154.148.0/22 
61.154.152.0/21 
61.154.160.0/21 
61.154.176.0/21 
61.155.0.0/16 
61.157.0.0/16 
61.159.112.0/21 
61.159.120.0/21 
61.159.128.0/18 
61.159.192.0/18 
61.159.216.0/23 
61.159.220.0/22 
61.159.64.0/18 
61.159.64.0/20 
61.159.80.0/21 
61.159.88.0/21 
61.159.96.0/20 
61.160.0.0/16 
61.161.64.0/18 
61.164.0.0/16 
61.166.0.0/16 
61.166.192.0/20 
61.166.208.0/22 
61.166.212.0/23 
61.166.216.0/22 
61.166.220.0/23 
61.166.222.0/24 
61.170.0.0/16 
61.174.0.0/15 
61.177.0.0/16 
61.178.0.0/16 
61.178.5.0/24 
61.180.0.0/17 
61.183.0.0/16 
61.184.0.0/16 
61.185.0.0/16 
61.186.0.0/17 
61.186.0.0/18 
61.186.128.0/17 
61.186.64.0/18 
61.187.0.0/16 
61.188.0.0/16 
61.189.128.0/17 
61.190.0.0/15 
63.140.0.0/24 
66.102.240.0/21 
66.102.245.0/24 
66.102.248.0/22 
66.102.255.0/24 
69.163.104.0/24 
81.173.16.0/24 
81.173.17.0/24 
81.173.18.0/24 
81.173.19.0/24 
81.173.20.0/24 
81.173.21.0/24 
81.173.22.0/24 
81.173.23.0/24

AKEGEC

ChinaUnicorn:

1.188.0.0/14
1.24.0.0/13
1.56.0.0/13
101.125.0.0/23
101.125.2.0/23
101.125.250.0/23
101.125.4.0/23
101.16.0.0/12
101.198.196.0/22
101.199.196.0/22
101.199.48.0/20
101.204.0.0/14
101.251.144.0/20
101.251.144.0/21
101.251.160.0/21
101.64.0.0/13
101.72.0.0/14
103.107.188.0/22
103.110.132.0/22
103.110.156.0/22
103.114.100.0/22
103.120.224.0/22
103.135.80.0/23
103.14.132.0/23
103.143.16.0/22
103.151.142.0/23
103.152.76.0/23
103.18.224.0/22
103.192.4.0/23
103.193.188.0/22
103.198.64.0/22
103.204.72.0/22
103.205.192.0/22
103.205.252.0/22
103.207.228.0/22
103.21.116.0/22
103.211.220.0/22
103.211.96.0/22
103.213.96.0/22
103.214.48.0/22
103.219.28.0/22
103.219.32.0/21
103.22.188.0/22
103.220.124.0/22
103.221.140.0/22
103.224.228.0/23
103.227.120.0/23
103.227.136.0/22
103.227.228.0/22
103.229.148.0/22
103.229.212.0/22
103.231.144.0/24
103.231.145.0/24
103.231.146.0/24
103.232.144.0/22
103.233.4.0/22
103.234.56.0/22
103.236.120.0/22
103.236.240.0/22
103.238.160.0/23
103.239.244.0/22
103.239.68.0/22
103.24.228.0/22
103.240.124.0/22
103.240.36.0/22
103.240.84.0/22
103.244.164.0/22
103.246.152.0/22
103.246.8.0/22
103.248.102.0/23
103.248.152.0/23
103.248.154.0/23
103.250.216.0/22
103.250.248.0/22
103.250.32.0/22
103.251.124.0/22
103.251.160.0/22
103.251.240.0/22
103.251.96.0/22
103.252.204.0/22
103.252.232.0/22
103.252.248.0/22
103.253.224.0/22
103.253.60.0/22
103.255.200.0/22
103.255.88.0/22
103.255.92.0/22
103.27.240.0/22
103.27.4.0/22
103.28.204.0/22
103.3.112.0/22
103.3.124.0/22
103.3.136.0/22
103.3.140.0/22
103.3.152.0/22
103.3.96.0/22
103.31.200.0/22
103.35.220.0/23
103.36.208.0/22
103.36.28.0/22
103.38.40.0/22
103.39.88.0/22
103.40.12.0/22
103.40.192.0/22
103.40.232.0/22
103.41.164.0/22
103.44.80.0/22
103.45.160.0/22
103.45.72.0/22
103.45.76.0/22
103.46.128.0/21
103.46.136.0/22
103.5.168.0/22
103.52.172.0/22
103.52.176.0/22
103.53.204.0/22
103.56.32.0/22
103.56.60.0/22
103.59.124.0/22
103.7.212.0/22
103.78.64.0/23
103.78.66.0/23
103.8.34.0/23
103.81.48.0/22
103.83.72.0/22
103.85.84.0/23
103.85.86.0/23
103.9.248.0/22
103.90.92.0/22
103.91.208.0/22
103.92.132.0/22
103.95.220.0/23
103.95.222.0/24
103.98.168.0/22
103.98.44.0/23
106.3.208.0/21
110.16.0.0/14
110.228.0.0/14
110.240.0.0/12
110.44.12.0/22
110.52.0.0/15
110.6.0.0/15
110.72.0.0/15
111.160.0.0/13
111.160.61.0/24
111.202.242.0/24
111.202.244.0/24
111.202.246.0/24
111.203.27.0/24
111.205.242.0/24
111.205.38.0/24
111.223.12.0/22
111.85.0.0/16
112.109.128.0/17
112.111.0.0/16
112.122.0.0/15
112.132.0.0/16
112.192.0.0/14
112.224.0.0/11
112.80.0.0/13
113.0.0.0/13
113.194.0.0/15
113.200.0.0/15
113.204.0.0/14
113.213.0.0/18
113.213.64.0/19
113.213.96.0/20
113.224.0.0/12
113.31.128.0/21
113.31.136.0/22
113.31.16.0/20
113.31.32.0/20
113.31.80.0/21
113.31.88.0/22
113.31.92.0/23
113.56.0.0/15
113.58.0.0/16
113.59.0.0/17
113.8.0.0/15
113.9.3.0/24
113.9.6.0/24
114.112.144.0/20
114.247.44.0/24
114.255.106.0/24
114.28.248.0/21
114.60.0.0/14
115.173.0.0/19
115.31.64.0/22
115.46.0.0/16
115.48.0.0/12
115.85.192.0/18
116.112.0.0/14
116.116.0.0/15
116.128.224.0/19
116.129.0.0/17
116.129.128.0/18
116.129.192.0/19
116.129.224.0/20
116.129.240.0/22
116.129.244.0/22
116.129.248.0/21
116.130.0.0/16
116.131.0.0/16
116.132.0.0/15
116.135.0.0/18
116.135.128.0/17
116.135.64.0/18
116.136.0.0/15
116.138.0.0/15
116.140.0.0/17
116.140.128.0/18
116.141.0.0/16
116.147.0.0/16
116.148.0.0/16
116.149.0.0/16
116.149.0.0/17
116.149.128.0/17
116.153.0.0/16
116.154.0.0/15
116.162.0.0/16
116.163.0.0/18
116.167.0.0/16
116.168.0.0/16
116.169.0.0/16
116.171.0.0/16
116.172.128.0/17
116.172.64.0/18
116.174.0.0/15
116.176.0.0/16
116.177.0.0/16
116.178.0.0/16
116.179.0.0/16
116.2.0.0/15
116.255.128.0/17
116.78.0.0/16
116.95.0.0/16
117.121.128.0/22
117.121.132.0/22
117.121.136.0/22
117.121.140.0/22
117.48.144.0/20
117.72.255.0/24
117.74.64.0/20
117.8.0.0/13
118.126.128.0/17
118.132.0.0/14
118.184.168.0/21
118.184.176.0/21
118.184.184.0/21
118.184.192.0/19
118.187.0.0/16
118.187.0.0/18
118.187.64.0/18
118.191.12.0/24
118.191.4.0/23
118.191.6.0/23
118.191.8.0/22
118.212.0.0/16
118.26.116.0/22
118.72.0.0/13
118.80.0.0/15
118.88.128.0/17
118.88.32.0/19
118.88.32.0/20
118.88.64.0/18
119.108.0.0/15
119.112.0.0/13
119.162.0.0/15
119.164.0.0/14
119.176.0.0/12
119.233.128.0/17
119.248.0.0/14
119.253.128.0/17
119.255.0.0/18
119.27.64.0/18
119.36.0.0/16
119.38.0.0/21
119.39.0.0/16
119.4.0.0/14
119.40.0.0/19
119.48.0.0/13
119.57.0.0/18
119.62.0.0/16
119.88.128.0/18
119.88.192.0/18
120.0.0.0/12
120.128.0.0/21
120.132.0.0/19
120.132.96.0/20
120.65.0.0/16
120.92.240.0/20
121.16.0.0/13
121.24.0.0/14
121.28.0.0/15
121.30.0.0/16
121.31.0.0/16
121.46.192.0/22
121.46.196.0/22
121.46.200.0/22
121.52.224.0/19
121.76.0.0/15
122.102.64.0/20
122.114.0.0/16
122.136.0.0/13
122.136.96.0/19
122.156.0.0/14
122.188.0.0/14
122.192.0.0/14
122.96.0.0/15
122.97.172.0/22
122.97.176.0/22
122.97.64.0/18
123.117.141.0/24
123.128.0.0/13
123.138.0.0/15
123.144.0.0/14
123.148.0.0/16
123.152.0.0/13
123.188.0.0/14
123.196.0.0/16
123.232.0.0/14
123.234.0.0/18
123.4.0.0/14
123.58.128.0/19
123.8.0.0/13
124.128.0.0/13
124.152.0.0/16
124.160.0.0/16
124.161.0.0/16
124.162.0.0/16
124.163.0.0/16
124.164.0.0/14
124.240.128.0/18
124.249.0.0/17
124.6.64.0/18
124.66.0.0/17
124.67.0.0/16
124.68.128.0/18
124.88.0.0/16
124.89.0.0/17
124.89.128.0/17
124.90.0.0/15
124.92.0.0/14
124.93.0.0/16
124.93.212.0/22
125.211.0.0/16
125.32.0.0/16
125.34.240.0/24
125.34.243.0/24
125.34.244.0/24
125.34.251.0/24
125.34.252.0/24
125.34.253.0/24
125.34.254.0/24
125.35.128.0/17
125.35.128.0/20
125.36.0.0/14
125.40.0.0/13
139.159.112.0/23
139.170.0.0/16
139.208.0.0/13
14.204.0.0/15
144.48.64.0/22
146.196.68.0/22
150.129.136.0/22
150.129.252.0/22
150.242.232.0/22
150.255.0.0/16
153.0.0.0/16
153.101.0.0/16
153.3.0.0/16
153.34.0.0/15
153.36.0.0/15
153.99.0.0/16
157.0.0.0/16
160.202.60.0/22
163.53.168.0/22
171.116.0.0/14
171.120.0.0/13
171.34.0.0/15
171.36.0.0/14
175.106.128.0/17
175.146.0.0/15
175.148.0.0/14
175.152.0.0/14
175.16.0.0/13
175.160.0.0/12
175.184.128.0/18
175.42.0.0/15
175.44.0.0/16
180.129.128.0/17
180.130.0.0/16
180.178.252.0/22
180.95.128.0/17
182.112.0.0/12
182.18.80.0/21
182.18.88.0/21
182.236.160.0/19
182.54.0.0/17
182.88.0.0/14
183.184.0.0/13
183.92.0.0/14
202.102.128.0/18
202.102.224.0/19
202.106.133.0/24
202.106.143.0/24
202.107.0.0/17
202.108.146.0/24
202.108.147.0/24
202.110.0.0/18
202.110.192.0/18
202.110.210.0/24
202.110.224.0/24
202.110.49.0/24
202.110.64.0/18
202.111.128.0/19
202.111.160.0/19
202.122.128.0/24
202.127.112.0/20
202.127.209.0/24
202.38.164.0/23
202.38.166.0/23
202.63.160.0/20
202.75.208.0/21
202.75.208.0/22
202.75.212.0/22
202.90.20.0/22
202.91.224.0/21
202.91.232.0/21
202.96.64.0/19
202.97.128.0/19
202.97.160.0/19
202.97.192.0/18
202.98.0.0/19
202.99.128.0/18
202.99.192.0/19
202.99.21.0/24
202.99.224.0/19
202.99.56.0/24
202.99.64.0/18
203.80.144.0/20
203.93.0.0/24
203.93.144.0/20
203.93.160.0/20
210.12.50.0/24
210.22.48.0/20
210.5.128.0/20
210.51.212.0/22
210.76.160.0/19
210.76.32.0/19
210.76.48.0/20
211.102.128.0/18
211.154.64.0/19
211.155.120.0/21
211.155.232.0/22
211.158.0.0/16
211.162.200.0/22
211.167.96.0/19
211.90.0.0/18
211.90.216.0/21
211.90.224.0/19
211.90.64.0/21
211.90.72.0/21
211.90.80.0/21
211.90.88.0/21
211.90.96.0/19
211.91.0.0/18
211.91.120.0/21
211.91.128.0/19
211.91.160.0/20
211.91.176.0/21
211.91.216.0/21
211.91.224.0/20
211.91.240.0/20
211.91.64.0/20
211.91.80.0/20
211.91.96.0/20
211.92.0.0/17
211.92.128.0/21
211.92.136.0/21
211.92.144.0/20
211.92.160.0/20
211.92.176.0/20
211.92.192.0/19
211.92.224.0/20
211.92.244.0/22
211.93.0.0/21
211.93.128.0/20
211.93.144.0/21
211.93.152.0/21
211.93.16.0/21
211.93.160.0/21
211.93.164.0/22
211.93.168.0/21
211.93.176.0/20
211.93.192.0/21
211.93.204.0/22
211.93.224.0/19
211.93.24.0/21
211.93.32.0/19
211.93.64.0/18
211.93.8.0/21
211.94.192.0/18
211.97.104.0/21
211.97.112.0/20
211.97.128.0/19
211.97.160.0/21
211.97.192.0/18
211.97.64.0/19
211.97.96.0/21
218.10.0.0/16
218.104.128.0/20
218.104.144.0/20
218.104.224.0/19
218.104.64.0/20
218.104.96.0/20
218.106.112.0/20
218.106.144.0/20
218.106.80.0/20
218.106.96.0/22
218.107.192.0/19
218.107.211.0/24
218.11.0.0/16
218.12.0.0/16
218.21.128.0/17
218.21.224.0/20
218.21.240.0/20
218.24.0.0/16
218.24.160.0/20
218.242.0.0/16
218.25.0.0/16
218.26.0.0/16
218.27.0.0/16
218.28.0.0/15
218.56.0.0/15
218.56.32.0/24
218.57.131.0/24
218.57.136.0/24
218.57.139.0/24
218.58.0.0/15
218.60.0.0/16
218.61.0.0/16
218.61.146.0/24
218.62.0.0/17
218.62.33.0/24
218.67.128.0/17
218.67.240.0/24
218.67.241.0/24
218.67.242.0/24
218.68.0.0/15
218.69.250.0/24
218.69.89.0/24
218.69.93.0/24
218.69.95.0/24
218.69.96.0/24
218.7.0.0/16
218.8.0.0/15
218.98.0.0/21
218.98.16.0/21
218.98.24.0/21
218.98.32.0/21
218.98.40.0/21
218.98.48.0/21
218.98.56.0/21
218.98.8.0/21
219.154.0.0/15
219.156.0.0/15
219.158.0.0/20
219.158.0.0/24
219.158.16.0/20
219.158.26.0/24
219.158.32.0/20
219.158.59.0/24
219.158.60.0/24
219.158.61.0/24
219.158.62.0/24
219.158.63.0/24
219.158.96.0/19
219.159.0.0/18
219.233.0.0/16
220.114.250.0/23
220.192.0.0/18
220.192.128.0/19
220.192.160.0/20
220.192.176.0/21
220.192.184.0/22
220.192.192.0/20
220.192.208.0/21
220.192.216.0/21
220.192.224.0/19
220.192.64.0/21
220.192.80.0/20
220.192.96.0/19
220.193.0.0/17
220.194.128.0/18
220.194.192.0/18
220.194.64.0/18
220.195.0.0/19
220.195.128.0/19
220.195.160.0/19
220.195.192.0/18
220.195.32.0/19
220.195.64.0/18
220.197.0.0/17
220.197.160.0/20
220.197.176.0/20
220.197.192.0/19
220.197.224.0/21
220.197.232.0/21
220.197.240.0/20
220.200.0.0/18
220.200.112.0/20
220.200.128.0/20
220.200.148.0/22
220.200.152.0/21
220.200.160.0/19
220.200.192.0/18
220.200.64.0/19
220.200.96.0/20
220.201.0.0/17
220.201.128.0/18
220.201.192.0/18
220.202.0.0/18
220.202.128.0/19
220.202.160.0/19
220.202.192.0/18
220.202.64.0/19
220.202.96.0/19
220.203.32.0/19
220.205.0.0/16
220.207.184.0/22
220.231.0.0/18
220.234.0.0/16
220.248.128.0/19
220.248.160.0/19
220.248.192.0/18
220.248.192.0/19
220.248.224.0/19
220.249.128.0/18
220.249.64.0/18
220.250.0.0/19
220.250.32.0/19
220.250.64.0/18
221.0.0.0/15
221.10.0.0/16
221.10.25.0/24
221.11.0.0/17
221.11.128.0/18
221.11.192.0/19
221.11.224.0/19
221.12.0.0/17
221.12.128.0/18
221.13.0.0/18
221.13.128.0/17
221.13.64.0/19
221.13.96.0/19
221.133.240.0/20
221.137.0.0/16
221.14.0.0/15
221.192.0.0/15
221.192.166.0/23
221.194.0.0/16
221.195.0.0/16
221.196.0.0/15
221.198.0.0/16
221.199.0.0/17
221.199.0.0/19
221.199.128.0/18
221.199.192.0/20
221.199.224.0/19
221.199.32.0/20
221.2.0.0/16
221.200.0.0/14
221.203.244.0/22
221.203.248.0/21
221.204.0.0/15
221.206.0.0/16
221.207.0.0/18
221.207.128.0/17
221.207.64.0/18
221.208.0.0/14
221.208.150.0/24
221.208.160.0/22
221.212.0.0/16
221.212.126.0/24
221.213.0.0/16
221.214.0.0/15
221.3.0.0/17
221.3.128.0/17
221.5.128.0/17
221.6.0.0/16
221.7.0.0/19
221.7.128.0/17
221.7.32.0/19
221.7.64.0/19
221.7.96.0/19
221.8.0.0/15
221.8.12.0/24
222.132.0.0/14
222.135.176.0/22
222.135.184.0/21
222.136.0.0/13
222.160.0.0/15
222.161.0.0/22
222.161.2.0/23
222.161.4.0/22
222.162.0.0/16
222.163.0.0/16
27.0.128.0/24
27.0.130.0/23
27.112.0.0/21
27.192.0.0/11
27.50.128.0/17
27.54.192.0/19
27.8.0.0/13
27.98.224.0/19
36.248.0.0/14
36.32.0.0/14
39.64.0.0/11
42.157.0.0/21
42.157.8.0/22
42.176.0.0/13
42.224.0.0/12
42.4.0.0/14
42.48.0.0/15
42.51.0.0/17
42.51.128.0/17
42.52.0.0/14
42.56.0.0/14
42.63.0.0/16
42.84.0.0/14
43.224.12.0/22
43.224.208.0/22
43.224.24.0/22
43.224.52.0/23
43.224.56.0/22
43.224.80.0/22
43.225.180.0/22
43.226.116.0/23
43.226.118.0/23
43.226.120.0/22
43.226.160.0/22
43.226.164.0/22
43.227.104.0/22
43.227.196.0/22
43.227.216.0/21
43.228.0.0/21
43.228.64.0/21
43.231.144.0/20
43.231.32.0/20
43.239.120.0/22
43.240.0.0/22
43.240.156.0/22
43.240.204.0/22
43.240.56.0/22
43.240.72.0/22
43.241.16.0/22
43.241.180.0/22
43.241.50.0/23
43.242.152.0/22
43.242.156.0/22
43.242.164.0/22
43.242.180.0/22
43.242.64.0/22
43.243.156.0/22
43.243.16.0/22
43.243.228.0/22
43.243.4.0/22
43.246.228.0/23
43.247.4.0/24
43.247.88.0/22
43.248.184.0/21
43.248.192.0/20
43.248.20.0/24
43.248.200.0/22
43.248.21.0/24
43.248.22.0/23
43.248.244.0/22
43.249.136.0/22
43.249.144.0/22
43.249.192.0/22
43.249.236.0/22
43.250.112.0/22
43.250.168.0/22
43.250.200.0/22
43.250.244.0/22
43.250.32.0/22
43.250.4.0/22
43.251.36.0/22
43.254.136.0/22
43.254.168.0/22
43.254.52.0/22
43.254.8.0/22
43.255.84.0/22
43.255.96.0/22
45.113.20.0/22
45.113.24.0/22
45.113.240.0/23
45.113.252.0/22
45.115.164.0/22
45.119.68.0/22
45.120.100.0/22
45.124.80.0/22
45.125.44.0/22
45.250.32.0/22
45.250.36.0/23
45.250.38.0/24
45.250.39.0/24
45.250.40.0/22
45.252.104.0/22
45.254.48.0/23
49.4.104.0/22
49.4.108.0/23
49.4.110.0/24
49.4.112.0/20
49.4.96.0/21
58.144.0.0/16
58.16.0.0/16
58.17.0.0/17
58.17.128.0/17
58.18.0.0/16
58.19.0.0/16
58.20.0.0/16
58.21.0.0/16
58.22.0.0/15
58.24.0.0/15
58.240.0.0/15
58.240.60.0/23
58.242.0.0/15
58.244.0.0/15
58.83.17.0/24
59.81.100.0/23
59.81.102.0/23
59.81.104.0/23
59.81.12.0/23
59.81.16.0/23
59.81.20.0/23
59.81.24.0/23
59.81.36.0/23
59.81.40.0/23
59.81.46.0/24
59.81.68.0/23
59.81.72.0/23
59.81.76.0/23
59.81.78.0/23
59.81.8.0/23
59.81.80.0/23
59.81.82.0/23
59.81.86.0/23
59.81.88.0/23
59.81.92.0/23
59.81.94.0/23
59.81.98.0/23
59.83.192.0/19
59.83.224.0/21
59.83.232.0/22
60.0.0.0/13
60.10.0.0/16
60.11.0.0/16
60.12.0.0/16
60.12.7.0/24
60.13.0.0/18
60.13.128.0/17
60.13.64.0/18
60.14.0.0/15
60.16.0.0/13
60.208.0.0/13
60.216.0.0/15
60.217.0.0/20
60.218.0.0/15
60.220.0.0/14
60.23.240.0/20
60.24.0.0/14
60.255.0.0/16
60.28.0.0/15
60.28.3.0/24
60.28.4.0/22
60.28.64.0/21
60.28.72.0/23
60.28.8.0/24
60.28.80.0/20
60.28.96.0/23
60.30.0.0/16
60.30.0.0/24
60.30.1.0/24
60.30.2.0/24
60.30.32.0/21
60.30.40.0/23
60.31.0.0/16
60.63.0.0/16
60.8.0.0/15
61.133.0.0/17
61.134.128.0/18
61.134.192.0/18
61.134.96.0/19
61.136.0.0/18
61.136.64.0/18
61.137.128.0/17
61.138.0.0/18
61.138.128.0/18
61.138.64.0/18
61.139.128.0/18
61.156.0.0/16
61.158.0.0/17
61.158.128.0/17
61.159.0.0/18
61.161.0.0/18
61.161.128.0/17
61.162.0.0/16
61.163.0.0/16
61.167.0.0/16
61.168.0.0/16
61.176.0.0/16
61.179.0.0/16
61.180.128.0/17
61.181.0.0/16
61.181.244.0/24
61.181.26.0/24
61.182.0.0/16
61.189.0.0/17
61.240.0.0/19
61.240.128.0/19
61.240.160.0/19
61.240.192.0/19
61.240.224.0/21
61.240.232.0/21
61.240.240.0/21
61.240.32.0/19
61.240.64.0/18
61.241.128.0/19
61.241.160.0/19
61.241.192.0/19
61.241.64.0/18
61.242.128.0/19
61.242.160.0/19
61.242.192.0/18
61.243.0.0/19
61.243.112.0/21
61.243.124.0/22
61.243.128.0/18
61.243.192.0/19
61.243.32.0/20
61.243.48.0/20
61.243.96.0/20
61.49.86.0/24
61.52.0.0/15
61.54.0.0/16
61.55.0.0/16

johnpoz

Zero reason to block those - they are already blocked by the default block rule on the wan. The only reason you would block is to not log them.

Or if you had port forwards, and you didn't want specific IPs to hit your port forwards.

I think there is something really odd with your setup... I just don't see how some opt1 interface, or any interface at all really would ever see your own IP as inbound traffic for a block.. Makes zero sense..

Even if you had 2 wan interfaces, and opt1 was another wan interface.. Why would wan 1 send traffic to wan2 with destination other than your wan2 IP, etc..

How about you draw up how you have everything connected. And exactly what is this opt1 interface? What IP do you have on it? Just at a complete loss to how you would see such traffic..

Normally you have say this

internet -- wan (pfsense) lan/optX -- your networks(s)

How could you ever see traffic from your wan IP, hitting your lan side interfaces, or really any other interface even a wan?? If if you had your wan and lan on the same L2 network.. Why would your wan be sending traffic to your opt1 mac address? Just at a loss to how you are seeing such traffic..

edit?

Also setup openvpn on OPT1

Huh?? Still at a loss to how you would see source traffic of your external IP? Opt1 is setup as vpn client interface? Lets take a look at the details of exactly how your setup.. And if you have some vpn client setup... Turn all that off! Atleast while trying to figure out why your ntp is show sporadic in getting responses. We can always walk through how to correctly setup some vpn client after you fix your original ntp issue.

farmerjohn

@johnpoz
em0 - WAN
em1 - LAN
ovpnc4 (vpn provider) - OPT1. i have a few clients on LAN that use this as gateway.

farmerjohn

@johnpoz

Turn all that off!

ok - disabled 1. VPN / client / my provider and 2. the LAN rule for OPT1 gateway (vpn_clients alias).

The NTP status seems to have suddenly improved after just 10 minutes. looks like will be all 377's in a few minutes! so what did I do wrong with my vpn client setup?

[2.5.1-RELEASE][admin@pfsense.home]/var/log: ntpq -p
     remote           refid      st t when poll reach   delay   offset  jitter
==============================================================================
+time.cloudflare 10.14.12.181     3 u   79  256  377   22.335   -1.920   0.680
-rolex.netservic 64.113.44.55     2 u  210  256  177   27.977   +1.981   1.938
+rb.steadfastdns 208.100.0.253    2 u   48  256  177   22.434   -1.686   4.161
-time.skylineser 130.207.244.240  2 u  120  256  177   25.379   -3.370   0.421
*n1.taur.dk      .PPS.            1 u   36  256  177  131.326   -2.014   3.197

johnpoz

@farmerjohn

Why would you set this?

Or the other one for wan? for 127/8 ?

Not sure why you would set hybrid for something your doing in auto anyway?

edit: Did you setup a static on opt1 and set a gateway? Auto nat would of never created that unless it thought it was a normal wan connection, a gateway was put on it??

But it never would of set those ports? Really confused on how that would of be auto generated like the description says.

farmerjohn

@johnpoz

Did you setup a static on opt1 and set a gateway? Auto nat would of never created that unless it thought it was a normal wan connection, a gateway was put on it??

no static routes. here are the Gateways. Screenshot from 2021-04-16 22-27-36.png

farmerjohn

@johnpoz
Regarding NAT rules, I copied the wan rules and adjusted for OPT1 according to vpn provider's instructions.

johnpoz

@farmerjohn said in NTP - poor reach after 20 hours:

according to vpn provider's instructions.

And what clueless vpn was this? Do you have a guide you followed?

Yah normally need just 1 hybrid rule ;)

edit:
BTW.. Even if you wanted to send other traffic down a vpn connection from pfsense - your dns for example. If wouldn't ever be a good idea to try an do ntp through a vpn connection.

farmerjohn

@johnpoz
Travelling for next few days, will try your example when get back. Thank you.

farmerjohn

@johnpoz
I like the simplicity of your example, how would I get there from my current setup? Just delete All my NAT rules - clean slate?

johnpoz

Yeah just delete all those hybrids you have.. No idea why any guide would say you need those.. Especially those with specific ports 1024:65k

What guide did you follow?

Also the other thing pretty much every vpn service guide I have looked at wants you to route everything through them.. When most likely you don't want that.. Don't pull routes in your client config, and then just policy route what "you" want to send down the vpn. Which could be all if you want, but ntp down a vpn is going to be a horrible setup.

farmerjohn

@johnpoz
I deleted all the Outbound NAT rules and added one as you suggested. I also disabled 'pull routes' in client config. Everything working well so far and NTP status is still showing 377's for the five individual servers.

I presently have 1.1.1.1 and 9.9.9.9 in System > general > DNS servers. Leak tests showing VPN public IP (good) and DNS servers as cloudflare and quad9 (should I care? Is it cloudflare trust vs VPN provider trust?). Here are my DNS Resolver settings in case I'm wrong/confused on something.