Web Site whitelist
natethegreat21 last edited by
Hope everyone is doing well today, I ran into a bit of a strange issue when using the Omegle web site it appears that my firewall is blocking the video feed. I have confirmed this by comparing the site to my phone on cellular data and on what it does on my network. Is there an easy way to allow all traffic from that site? I currently have a Netgear Nighthawk in AP mode for the Wi-Fi and that also might be the issue because I have 1GB internet and im only getting about 100Mbps out of the router and looking at the logs it looks like it may be blocking it but im unsure how to tell PFsense that its a AP. Any help would be greatly appreciated. Thanks again.
Gertjan last edited by
appears that my firewall is blocking the video feed
The site isn't sending the video to you, it was a device on your LAN network that was requesting it. The site replied with the file : a video.
A request (from your LAN) is always answered : the generated traffic coming back is accepted by default. That is what a state-full firewall is all about.
The default firewall rule on LAN permits ALL traffic to out. And ALL answers to that traffic can come back.
I have 1GB ..... on an AP.
Really ? 1 Gb for an AP is huge .... What AP is this ?
And your Wifi device can handle that speed ?
Use a 'wired' device on your LAN to test the real throughput. oth sides must have 1GB NICs of course.
@gertjan The internet, modem, NIC card, Switch, and AP are all 1GB compatible. running a speedtest on the the switch shows that im getting about 900Mbps but the AP is barley 90Mbps. Bypassing the PFsense firewall fixes the speed issue and and the Omegle video problem. So the firewall is blocking something. I tested it on 2 devices and the same result while on the firewall.
@natethegreat21 I was able to pull this from a port scanning site and tested the ports on the Diagnostics / Test ports and its says they all pass so I'm just more lost.
Gertjan last edited by
Again : pfSense is not blocking 'some ports' to some random destinations..
I advise you not to scan ports on "some" cloudfare servers. They protect their servers, and what do they do with IP's - for example your WAN IP - if they detect some one is scanning ? The same thing you would do : you will blocked the scanner. Cloudfare is equipped with such a protection.
and looking at the logs it looks like it may be blocking
Firewall rule don't rule dice.
It a pass or no pass.
What did you saw when you looked at the logs ?
The only traffic that might get blocked is incoming traffic on your LAN interface.
The default LAN firewall rule is "a pass all traffic" rule.