Unblock a specific website

andrzejls

Hi,
I encounter an issue with pfsense blocking a specific site: www.mirrors.kodi.tv, I put this site to a white list but that did not work. Any suggestions?.

Gertjan

@andrzejls

pfSense doesn't block any IP (host name).
It doesn't have a white list neither.

The default LAN firewall rule allows a connection to any IP, exceptions.

Why do you think your firewall is blocking access to www.mirrors.kodi.tv ?

andrzejls

@gertjan From my mobile using mobile network I have no problem accessing that site.

Bob.Dig

@andrzejls If pfBlockers logging would work it would be easily spotted which list is responsible...

So yeah, wrong board.

Gertjan

@andrzejls said in Unblock a specific website:

I have no problem accessing that site

Me neither.
I have no blocking (outgoing connections) firewall rules.

@bob-dig said in Unblock a specific website:

pfBlockers

pfBlockers ? He posted in the firewall forum.
If the issue started with pfBlockerng, then :
Remove all the IP and/or DNSBL feeds : problem solved.
Only add back feeds that do not contain the IP or hostname involved. => solved.
Or whitelist the DNSBL and/or IP. ( and reload pfBlockerng - and restart/flush the local DNS cache on the phone/device/pc whatever)

.

andrzejls

When I use MOBILE network I have no problem. When I connect through pfsense router I cannot access this site, it is blocked by pfsense. So how I can unblock it?

Gertjan

@andrzejls

Are you using pfBlockerng-devel, or not ?
If not, what are your (LAN) firewall rules ?

M_Devil

@andrzejls remove de www. part

andrzejls

@gertjan Yes, I am using pfBlockerNG_Devel. The good news is that I found the culprit: SNORT. It would not download free "Subscriber" rules giving en error:
"Downloading Snort Subscriber rules md5 file snortrules-snapshot-29200.tar.gz.md5...
Checking Snort Subscriber rules md5 file...
There is a new set of Snort Subscriber rules posted.
Downloading file 'snortrules-snapshot-29200.tar.gz'...
Done downloading rules file.
Snort Subscriber rules file download failed. Bad MD5 checksum.
Downloaded Snort Subscriber rules file MD5: e021251cbb448a6bb3c8c143e4fcdc99
Expected Snort Subscriber rules file MD5: f3102b2b778c695c31fa61fa5622ca41
Snort Subscriber rules file download failed. Snort Subscriber rules will not be updated."

After I deselected this option and downloaded other rules, I got "success" result and now all is working minus Snort free Subscriber rules.
The pfsense I run is 22.05 and Snort 4.16.

andrzejls

@m_devil Yes, "www.." it is not there. The entry is .mirrors.kodi.tv