Problem with Windows Update and Linux Update
-
Good afternoon people,
I will detail my problem.
I have a physical server with VMWare Esxi installed with 1 network card that has a Public IP.
I installed pfSense in a VM by cloning the MAC of vmnic0 from VMWare Esxi, I created a new internal vSwtich1_Iternal just for my internal network of my servers and left vSwitch0 as the pfSense WAN and vSwitch1_Interno as LAN.
I uploaded some Windows 2022 Standard VMs, they are communicating, going out to the normal internet.
But when I try to do the Windows Update it doesn't work, it says that there is a connection problem, if I try to access a site without ssl such as http://www.globo.com or http://www.google.com.br, it it does not redirect to https://, it gives a connection error, but if you type https://globo.com or https://google.com.br the site is open normally.
I'm going into production the week of 03/20 and I need to solve this problem with windows update and installing packages and updating linux, which are also having problems.
Note: I can ping and route to any public IP address.
Any questions, call me in private.
Strong hug.
-
@antonioremigio1 said in Problem with Windows Update and Linux Update:
if I try to access a site without ssl such as http://www.globo.com or http://www.google.com.br, it it does not redirect to https://, it gives a connection error, but if you type https://globo.com or https://google.com.br the site is open normally
Are you blocking port 80 outbound, on your LAN interface? By default LAN has rules to allow traffic to anywhere.
-
@steveits Hi,
Thanks for the feedback friend.
But I found where the problem was and it wasn't in pfSense.
The problem is that there were some VMWare Esxi output rules blocking the output for 80 and 443, I disabled the rules and the windows and linux update flowed.
Thanks.
-
[Solution]
There were some outgoing port rules in the VMWare Esxi firewall (outgoing ports) that prevented traffic on ports 80 and 443.
I disabled these rules and updating Windows and Linux worked, as well as accessing the http sites.
Thanks.