OPNsense Forum

Archive => 23.1 Legacy Series => Topic started by: davidgriffeth on April 01, 2023, 05:15:36 pm

Title: 23.1.5_4 Unbound Whitelist Domains Broken
Post by: davidgriffeth on April 01, 2023, 05:15:36 pm
Good morning! The unbound whitelist domains aren't working in 23.1.5_4. We've got a domain that's shown up on the Abuse.ch list that we need to whitelist, but adding the domain to the "Whitelist domains" has no impact - we still can't access it if blocklist is enabled. Is this a known issue? Does anyone know a workaround?
Title: Re: 23.1.5_4 Unbound Whitelist Domains Broken
Post by: minime on June 16, 2023, 12:49:19 pm
I have the same on OPNsense 23.1.9

Maybe I am doing it wrongly?

(https://gcdnb.pbrd.co/images/TH0FCe4WHegL.png?o=1)
Title: Re: 23.1.5_4 Unbound Whitelist Domains Broken
Post by: devilkin on June 16, 2023, 03:09:44 pm
You just need to add the domain (so giphy.com), not the domain/*
Title: Re: 23.1.5_4 Unbound Whitelist Domains Broken
Post by: minime on June 16, 2023, 03:44:48 pm
Thank you for your response.

That's the first thin I tried and it didn't work...it loads partially the website, but no gifs.

Title: Re: 23.1.5_4 Unbound Whitelist Domains Broken
Post by: Patrick M. Hausen on June 16, 2023, 03:54:03 pm
Quote from: minime on June 16, 2023, 03:44:48 pm
That's the first thin I tried and it didn't work...it loads partially the website, but no gifs.
Look at the page source. Possibly they are loading the assets from elsewhere. To get a complete overview use the developer console of your browser and select "Network", then hit whatever triggers a page reload for your browser and OS.
Title: Re: 23.1.5_4 Unbound Whitelist Domains Broken
Post by: minime on June 16, 2023, 08:25:30 pm
Thank you for your response.

I was able to solve it. I had to enter:

*.giphy.com
giphy.com

The first entry was needed as giphy is using subdomains for the content delivery.
Title: Re: 23.1.5_4 Unbound Whitelist Domains Broken
Post by: minime on June 16, 2023, 09:49:14 pm
Actually, no, I take it back. Doesn't work. I had, how embarrassing, the blocklist functionality unchecked...and hence it worked...so, no, still no joy.