Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Telegram bot not returning interaction for internal machine

    Scheduled Pinned Locked Moved General pfSense Questions
    12 Posts 2 Posters 368 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      cezarq
      last edited by

      Olá!
      I have a machine running a telegram bot to interactive with me.
      Example:
      Turn the light off?
      <YES> <NO>
      I receive the message, but when I click on the answer is not returning to the telegram bot for some reason and I get timeout answer.
      It was working great before the pfSense and I can't figure out what is blocking the communication. I already tried to create rules allowing ALL <-> ALL in WAN and LAN to see the problem, but without success. Also there is no blocking in the logs. Any ideias, please?

      78102fa8-2da5-473d-b208-bf2d559d6702-image.png

      1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        Where are you testing from? A client on the same subnet?

        Do you see states created for the traffic?

        Are you policy routing, have gateways set on the rules?

        The rules shown in your screen show show 0 state and 0 bytes on the counters so have never matched anything.

        C 1 Reply Last reply Reply Quote 0
        • C
          cezarq @stephenw10
          last edited by

          @stephenw10 thanks for reply.

          Where are you testing from? A client on the same subnet?
          Sorry, but I dont know if I understood the question, but the computer is in the LAN and my cellphone also, but the telegram server is on the Internet.

          Do you see states created for the traffic?
          Yes.
          5df7cf8e-c408-43a2-8b5e-0d80ec7ae1d9-image.png

          Are you policy routing, have gateways set on the rules?
          The gateway is the default. I have only one gateway. Should I change anything here?

          The rules shown in your screen show show 0 state and 0 bytes on the counters so have never matched anything.
          Exactly

          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            Which of those is to the Telegram server?

            I see one connection to a different local subnet.

            Does it work if the cellphone using cellular data instead of local wifi?

            Do you have port forwards setup to the bot machine?

            Nothing there really nooks like an issue. I'd expect this to work fine as long as outbound traffic allowed.

            C 1 Reply Last reply Reply Quote 0
            • C
              cezarq @stephenw10
              last edited by

              @stephenw10
              Which of those is to the Telegram server?
              The Telegram server is 149.154.167.220

              I see one connection to a different local subnet.
              Yes, to my IoT devices.

              Does it work if the cellphone using cellular data instead of local wifi?
              No. Same issue.

              Do you have port forwards setup to the bot machine?
              Yes, but not 443, another high port. Why, pls?

              1 Reply Last reply Reply Quote 0
              • stephenw10S
                stephenw10 Netgate Administrator
                last edited by

                I wouldn't expect to need any port forwards but was interested to if you had any. If the previous setup used them for example.

                If Telegram somehow relies on open ports for reply traffic you might need to setup a static outbound NAT rule for the server. That seems unlikely though.

                C 1 Reply Last reply Reply Quote 0
                • C
                  cezarq @stephenw10
                  last edited by cezarq

                  @stephenw10 I never neeeded static outbound NAT rule before and I didnt find anything from Telegram asking to do so. :-(

                  I see communication from both sides but not working 😢 :
                  3b9d9a3c-3c63-4d08-8f34-307c9f7b2edb-image.png

                  1 Reply Last reply Reply Quote 0
                  • stephenw10S
                    stephenw10 Netgate Administrator
                    last edited by

                    What was your setup before pfSense?

                    Could be simply a coincidence that this stopped when you put pfSense in.

                    I have no idea what sort of logging or debugging the bot machine might be able to provide but I would check for any errors there.

                    C 1 Reply Last reply Reply Quote 0
                    • C
                      cezarq @stephenw10
                      last edited by

                      @stephenw10 I was using a UDM-PRO (Ubiquiti Gateway)

                      1 Reply Last reply Reply Quote 0
                      • stephenw10S
                        stephenw10 Netgate Administrator
                        last edited by

                        And you don't see any blocked packets on WAN from 149.154.167.220?

                        If it was a source port randomisation issue you would expect to see blocked traffic.

                        C 1 Reply Last reply Reply Quote 0
                        • C
                          cezarq @stephenw10
                          last edited by

                          @stephenw10 Nothing. Thats why I am so lost...
                          bbdec906-1681-482b-bb7b-bf0b5156aa70-image.png
                          c85c41f2-62b7-4133-8d22-8f046998cb20-image.png

                          1 Reply Last reply Reply Quote 0
                          • stephenw10S
                            stephenw10 Netgate Administrator
                            last edited by

                            Well I'd be checking it works still when behind something else because it doesn't look like anything special should be required in pfSense.

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.