Home / server / Questions / 377585
Accepted
Chase Florell
Asked: 2012-04-08 12:06:42 +0800 CST

How can I track down what part of pfsense is blocking website access?

  • 772

I've got a PFSense firewall/gateway on our network. Everything works great except for the fact that I cannot access one specific website.

Pfsense is running the following packages

  • Country Block
  • LightSquid
  • nmap
  • notes
  • squid
  • squidGuard
  • Strikeback

I can access every single website I've ever tried aside from one that we need for business use (http://bridalnetwork.ca)

here's the traceroute

frodo:~ chase$ traceroute bridalnetwork.ca 
traceroute to  bridalnetwork.ca (192.197.103.73), 64 hops max, 52 byte packets  
 1  rohan (192.168.5.1)  6.618 ms  1.662 ms  9.207 ms  
 2  * * *  
 3  * * rohan (192.168.5.1)  7.225 ms !H  
 4  rohan (192.168.5.1)  5.314 ms !H 5.701 ms !H  7.573 ms !H  
frodo:~ chase$

How can I figure out what the reason behind the blockage is?

note: this has been tested on every computer on the network with the same results.
ps: the pfsense box is 'rohan' (192.168.5.1)

Here's what I get with Squid enabled
enter image description here

and here's what I get with Squid disabled
enter image description here

firewall networking pfsense

2 Answers

  1. Best Answer

    Your traceroute seems to indicate your routing is screwy. Should never see your default gateway as the hop multiple times. Maybe you have a subnet mask that's way out of whack or something similar. What does Diagnostics>Routes show? I doubt you're blocking it, seems more like a routing issue.

    • 4

  2. Quoth the manual:

    The Firewall logs at Status > System Logs on the Firewall tab show all of the logged firewall events. By default, this includes connections blocked by the default deny rule.

    Also, you can use pfctl -vvsr. That's -vv to be verbose, and include ruleset warnings. -s for filter paramters. -r to do a reverse DNS lookup on any IPs. pftctl has all sorts of cool options.

    • 0