specific website suddenly unreachable
-
@kom
Yes. We have a block of 5 IPs on our account, but only 1 coming into this pf box. The others are currently unused. -
@the_2pc Do a packet capture that keys on 50.220.121.209, then do a find & replace on the results to remove your public IP, then post it here so me or others can look at what's going on. That small snippet you posted above isn't enough information to see what's going on.
-
@kom The file was sent privately and I've replaced his public IP with 12.34.56.78:
You have something constantly talking to that IP via port 3339 and those comms happen just fine. All the attempts to start a connection with port 443 are not replied to. The other end isn't responding. I don't understand how pfSense would be the cause, but you say the problem goes away if you take it out of the loop.
-
Port 3339 is the port for the mining software, which is working fine. I will contact their support and see if our IP has been blocked or something, because it's fine from literally every other source.
-
@the_2pc You did say it worked fine without pfSense involved though, so that can't be it.
-
Well, maybe. When I plugged directly into the modem it gave us a DHCP IP, it was not using our static. I did not have an easy way at the time to use our static IP without using PF (during the workday I cant just take everyone offline or I'll have some very unhappy coworkers)
-
@the_2pc A-HA! I knew there had to be something else. Do you have more than one static IP you could try?
-
Okay I changed to another of our static IPs for a few moments and it worked fine. So it IS something to with that IP...
I've opened a ticket with their support team for further investigation. -
@the_2pc $10 please
-
Turns out we had a few too many incorrect login attempts (someone forgot a password) and they IP banned us. All is working again.
Thanks everyone