Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Roku 3 Geoblock

    Scheduled Pinned Locked Moved General pfSense Questions
    3 Posts 2 Posters 1.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • N
      nicholas1520
      last edited by

      Hello,

      I'm trying to replicate the following configuration on my setup:

      iptables -t nat -I PREROUTING -p udp -d 8.8.8.8 –dport 53 -j DNAT --to 208.122.23.23
      iptables -t nat -I PREROUTING -p udp -d 8.8.4.4 --dport 53 -j DNAT --to 208.122.23.23
      iptables -t nat -I PREROUTING -p tcp -d 8.8.8.8 --dport 53 -j DNAT --to 208.122.23.23
      iptables -t nat -I PREROUTING -p tcp -d 8.8.4.4 --dport 53 -j DNAT --to 208.122.23.23

      At least I believe that's the rule I'm trying to make. It's supposed to prevent the traffic going to Google's DNS and send it to Unblock US DNS servers.
      The Roku 3 is hard coded it seems to ignore all other DNS and prefer Google's DNS.

      Any advice would be appreciated.

      1 Reply Last reply Reply Quote 0
      • V
        viragomann
        last edited by

        You can do this with a simple port forwarding rule. Firewall > NAT > Forward

        Assuming you want to route any DNS request to 208.122.23.23, add a rule like this:
        Interface: LAN (or which ever the DNS requests enter pfSense)
        Protocol: TCP/UDP
        Destination: any
        Destination port: 53
        Redirect target IP: 208.122.23.23
        Redirect target port: 53

        If you only want to redirect requests to Google servers enter the server IP at Destination and add an additional rule for the other server.

        1 Reply Last reply Reply Quote 0
        • N
          nicholas1520
          last edited by

          Hello,

          Thank you for the reply. I had believe the iptables syntax was the correction solution the above mentioned problem but it seems not.

          This is an article describing the solution (it's further down): https://community.ubnt.com/t5/EdgeMAX/Removing-Netflix-geoblocking-on-Roku-3-firmware-6-1/td-p/1277865

          I had replicated that configuration on my Edgerouter and I'm having no luck at all doing it on pfSense.

          Problem:

          Roku contacts Google's DNS (over Unblock-US or Unotelly's)
          It by-passes them and decides to use Google's DNS

          Now it won't allow me to view any of the US content, because Google DNS is hard coded into the Netflix application and the only way to make this work is by rejecting/redirecting all the Google DNS requests to Unblock-US or Unotelly I'd think.

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.