Pfsense blocking android traffic

goldie4042 · Mar 10, 2016, 11:44 PM

Pfsense is blocking traffic to my android phones. I have not set any rules to block any traffic on my lan yet traffic is being blocked from 3 different android phones on my network. If I keep refreshing my phone eventually the traffic will go through. Anyone know anything about this. The problem seems very similar to the guy in this post https://www.reddit.com/r/PFSENSE/comments/3h00qf/blocking_legitimate_traffic_when_allowed/

KOM · Mar 11, 2016, 12:26 AM

It's out of state traffic. Nothing is really being blocked.

https://doc.pfsense.org/index.php/Why_do_my_logs_show_%22blocked%22_for_traffic_from_a_legitimate_connection

goldie4042 · Mar 12, 2016, 5:01 PM

So do you have any idea why my android traffic is unreliable? If I switch from pfsense to mobile data everything loads as usual but as soon as I connect back to my home network traffic becomes unreliable.

Harvy66 · Mar 12, 2016, 11:00 PM

Poor wifi signal?

goldie4042 · Mar 13, 2016, 3:00 AM

Thats definitely not the problem. I have swapped the access point with a different one and the same problem occurs. I have several devices on the network including IOS devices, OSX devices, Windows devices, and Android devices. This problem only occurs with the Android devices. I have swapped every piece of hardware out (access point, network cables, switch) and the only time that the issue was resolved was when I swapped the pfsense firewall for a Sophos firewall. This started a month and a half ago and then mysteriously resolved itself after a week or so but the problem has returned.

goldie4042 · Mar 13, 2016, 5:51 AM

I've narrowed the problem down to DNS. My DNS queries are timing out ONLY on the Android devices. Has anyone ever experienced anything like this?

mer · Mar 13, 2016, 9:28 AM

@goldie4042:

I've narrowed the problem down to DNS. My DNS queries are timing out ONLY on the Android devices. Has anyone ever experienced anything like this?

Assuming your pfSense box is providing DHCP, what DNS servers are you telling things to use? The pfSense box, Google, OpenDNS, etc?

goldie4042 · Mar 13, 2016, 5:50 PM

I've fixed the problem. As Kom mentioned, this is not a firewall isssue. This is a DNS issue and more specifically a problem with ipv6. Once I disabled DNS ipv6 everything seems to have started working. Here is how other people are describing the problem https://code.google.com/p/android/issues/detail?id=79576