Unable to locate which list is blocking address

[cjbujold]

Hi,

Running Quickbooks Pro desktop and PFBlockerNG 2.2.5.23 which is blocking a Quickbooks javascript which causes an error when opening aquickbooks data file. I have whitelisted the Intuit.com in DNSBL and also added it to my IP Permit white list(outbound) with no success. Trying to find which list or DNSBL is blocking it and trying to find a way to have it whitelisted as not to block the javascript.

If I turnoff PFblockerng, the error is not created, therefore I know the issue is some list that is blocking the javascript from properly running. I'm presuming it may be one of my block adds list but cannot find which.

Any suggestion on how to fix this would be appreciated.

[johnpoz]

You sure not related to the ransomware issue they have been dealing with?
https://krebsonsecurity.com/2019/07/quickbooks-cloud-hosting-firm-insynq-hit-in-ransomware-attack/

[BBcan177]

@cjbujold
Anything that is blocked is visible in the Reports/Alerts Tab. You can use the "Alerts Filter" to refine the search.

drill @8.8.8.8 intuit.com

;; ->>HEADER<<- opcode: QUERY, rcode: NOERROR, id: 35702
;; flags: qr rd ra ; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;; intuit.com.  IN      A

;; ANSWER SECTION:
intuit.com.     1       IN      A       199.16.139.15
intuit.com.     1       IN      A       12.179.134.145

;; AUTHORITY SECTION:

;; ADDITIONAL SECTION:

;; Query time: 39 msec
;; SERVER: 8.8.8.8
;; WHEN: Mon Jul 22 00:46:29 2019
;; MSG SIZE  rcvd: 60