OPNsense Forum

English Forums => Intrusion Detection and Prevention => Topic started by: W0nderW0lf on August 25, 2020, 08:03:02 pm

Title: Suricata prevents Battle.net login - no drops or alerts logged
Post by: W0nderW0lf on August 25, 2020, 08:03:02 pm

Hello,

Today I switched my Windows PC to Opnsense Client Network. After checking all games and services I am running, I realized that I cannot login to blizzard's battle.net, or Star Citizen's server
I checked multiple logs, but I found nothing that indicated a block by some rules or similar.

After a lot try's and error's I turned off suricata. That made it work and I could login to the Gameservices.

I've searched all rules that had "blizzard" and "battle" in its name, but I still don't see any alert in the logs.
How is that possible that Suricata prevents some Apps without logging it?

Title: Re: Suricata prevents Battle.net login - no drops or alerts logged
Post by: Altmana on August 25, 2020, 11:49:59 pm

Does it work when when you disable the suricata service?

Title: Re: Suricata prevents Battle.net login - no drops or alerts logged
Post by: W0nderW0lf on August 26, 2020, 07:17:51 am

Quote

After a lot try's and error's I turned off suricata. That made it work

So yes, it works after turning off suricata

Title: Re: Suricata prevents Battle.net login - no drops or alerts logged
Post by: XeroX on August 31, 2020, 11:00:54 am

All rules regarding battle.net and for ex. warcraft are disabled in "Rules" overview?

Title: Re: Suricata prevents Battle.net login - no drops or alerts logged
Post by: Altmana on February 28, 2021, 06:40:08 pm

Quote from: XeroX on August 31, 2020, 11:00:54 am

All rules regarding battle.net and for ex. warcraft are disabled in "Rules" overview?

Check the messeges in Suricata to see what is blocked and what rule is responsible. Then you can fix the rule.