PsSense blocking whatsapp

mrjoli021

My firewall is setup is a standard setup, nothing special. NO ports open from the outside and everything allowed outbound. I have validated that all protocols are set for outbound including TCP and UDP. I do use geolocation blocking as well as PFBlockerNG. The geolocation is set to only block certain countries but US which is where I live is open and allowed. Any suggestion as to what I need too do to allow WhatsApp to function correctly in my network? If I choose the wifi connected to my ISP's modem WhatsApp works, so im assuming the issue is on PFsense.

Gertjan

@mrjoli021 said in PsSense blocking whatsapp:

so im assuming the issue is on PFsense

Noop. It's you. And you know it, because a fresh-installed pfSense doesn't block "something" - like Whatsapp.

Proof it yourself.
Remove

@mrjoli021 said in PsSense blocking whatsapp:

I do use geolocation blocking

also remove or deactivated all

@mrjoli021 said in PsSense blocking whatsapp:

as well as PFBlockerNG

Btw : aren't these one and the same thing ??

Now, you have no more issues with Whatapp.
And you have your answer why Whatssapp didn't work any more.

mrjoli021

Hello,

I understand the issue is me not Pfsense. I am just trying to understand why UDP ports are being blocked. I realized that this is not just happening on WhatsApp it is happening for other voip applications. I use MS teams for work and chat works fine, but when I attempt to make a call it fails.
My outbound NAT rules are set to allow all protocols. What else can I attempt?

Gertjan

@mrjoli021 said in PsSense blocking whatsapp:

I am just trying to understand why UDP ports are being blocked.

pfSense 'out of the box' doesn't block anything.

When using packages like "PFBlockerNG", just be ready for side effects you didn't suspect up front.
What did the PFBlockerNG logs tell you ?

What firewall rules were injected ? What are the aliases used in these used ? Do they contain an IP Whatsapp is using ? Sometimes, you have to dig to the bottom to see what's up.
Not all PFBlockerNG feeds are equal.
Remember, Whatsapp is Facebook ....

You are using something else to "geolocation blocking" : same thing : check things out.

mrjoli021

Found the issue. Apparently STUN service UDP 3478 was being blocked. Found it in the firewall logs. I unblocked it and now both Ms teams and WhatsApp is working.