• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

pfblockerng is blocking my UniFi Controller Domain address

Scheduled Pinned Locked Moved pfBlockerNG
11 Posts 4 Posters 1.2k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • H
    hpspar05
    last edited by Jul 30, 2020, 4:29 AM

    pfblockerng is blocking my UniFi Controller Domain address but not the 192.168.x.x address.

    I've been trying for the last four days to figure this out buy I'm a newbie and this isn't secondhand to me.

    Here's my setup, pfsense - Unifi switch - Unifi cloud key gen 2 + - and a self hosted Unifi Controller Ubuntu Server 20.04.

    What I'm trying to accomplice is to have the controller secure with Let's Encrypt instead of insecure with a self signed CA. I finally got the server up and running yesterday with the Let's Encrypt CA and after get a domain name from godaddy, but once I tired too access the controller with my domain address, pfblockerng blocked it with no visible way to unblock it.

    I need help and sleep.;)

    Screenshot_2020-07-29 pfSense localdomain - Firewall pfBlockerNG Alerts.png

    1 Reply Last reply Reply Quote 0
    • G
      Gertjan
      last edited by Jul 30, 2020, 6:19 AM

      Hummmm.

      Something else is going on here.

      RFC1918 IP's aren't listed in any feeds.
      Neither (I guess) the non-existing domain unifi.ldhprotech.com should not exist in any DNDBL feed (so how did you manage to get an certt from Letsencrypt ??).
      ( so why do these two lines exist in the DNDBL report ? )

      When you use pfBlockerNG-devel with default settings - which includes .... no feeds at all ( !! ) it should do nothing.

      No "help me" PM's please. Use the forum, the community will thank you.
      Edit : and where are the logs ??

      H 1 Reply Last reply Jul 30, 2020, 8:11 PM Reply Quote 0
      • H
        heper
        last edited by Jul 30, 2020, 6:42 AM

        Do you have a proper split dns setup to reach the Ubuntu device?

        H 1 Reply Last reply Jul 31, 2020, 9:50 PM Reply Quote 0
        • H
          hpspar05 @Gertjan
          last edited by Jul 30, 2020, 8:11 PM

          @Gertjan I followed this from UniFi; https://community.ui.com/questions/UniFi-Installation-Scripts-or-UniFi-Easy-Update-Script-or-UniFi-Lets-Encrypt-or-Ubuntu-16-04-18-04-/ccbc7530-dd61-40a7-82ec-22b17f027776

          1 Reply Last reply Reply Quote 0
          • H
            hpspar05 @heper
            last edited by Jul 31, 2020, 9:50 PM

            @heper
            I don't know what that is, i'm an old newbie thats way out my pay grade it seems.Can you instruct on what I need to do? Thanks

            1 Reply Last reply Reply Quote 0
            • J
              johnpoz LAYER 8 Global Moderator
              last edited by Jul 31, 2020, 11:10 PM

              @Gertjan said in pfblockerng is blocking my UniFi Controller Domain address:

              unifi.ldhprotech.com

              resolves to a public IP 73.235.x.x

              Why do you think pfblocker is blocking that? Says unknown, not blocked.

              Why you can not get to your controller is your trying to hit the public IP (pfsense wan I would assume) and you didn't setup nat reflection.

              Setup a host override on your pfsense unbound to to point your fqdn unifi.ldhprotech.com to whatever 192.168.50.x address controller is running on.

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.8, 24.11

              H 1 Reply Last reply Aug 1, 2020, 12:38 AM Reply Quote 2
              • H
                hpspar05 @johnpoz
                last edited by Aug 1, 2020, 12:38 AM

                @johnpoz
                Can I just pay you to do it for me somehow? Lol I don't know how to do any of what you're instructing me to do. If you could give mea child like detailed instructions I feel I could do what you are telling me to do. I wish this stuff came second nature to me but I'm a slow learner but I'm not giving up, if I can rebuild a M5 BMW motor, I can learn this stuff.;)

                H 1 Reply Last reply Aug 1, 2020, 7:17 AM Reply Quote 0
                • H
                  heper @hpspar05
                  last edited by Aug 1, 2020, 7:17 AM

                  @hpspar05

                  https://docs.netgate.com/pfsense/en/latest/nat/accessing-port-forwards-from-local-networks.html#method-2-split-dns

                  H 1 Reply Last reply Aug 2, 2020, 12:54 AM Reply Quote 0
                  • H
                    hpspar05 @heper
                    last edited by Aug 2, 2020, 12:54 AM

                    @heper
                    I have just prayed and blessed you with thanksgiving and joy! IT WORKED! IT FINALLY WORKED! Lol. I got a green lock now.;) Thanks to you, I can finally got some sleep. Lol. Thank you my friend.

                    1 Reply Last reply Reply Quote 0
                    • J
                      johnpoz LAYER 8 Global Moderator
                      last edited by Aug 2, 2020, 1:09 AM

                      @hpspar05 said in pfblockerng is blocking my UniFi Controller Domain address:

                      I got a green lock now

                      So now you just need to update your browser. They got rid of the green lock quite a few versions back ;)

                      I don't think any browsers still use that.

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                      H 1 Reply Last reply Aug 4, 2020, 8:29 AM Reply Quote 0
                      • H
                        hpspar05 @johnpoz
                        last edited by Aug 4, 2020, 8:29 AM

                        @johnpoz
                        Green Lock was a figure of text so to speak, I have a grey lock to be accurate and thank you for your help.

                        1 Reply Last reply Reply Quote 0
                        11 out of 11
                        • First post
                          11/11
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                          This community forum collects and processes your personal information.
                          consent.not_received