OPNsense Forum

Archive => 18.7 Legacy Series => Topic started by: jljb66 on August 06, 2018, 06:43:50 pm

Title: browsing errors since upgrade to 18.7
Post by: jljb66 on August 06, 2018, 06:43:50 pm

My web Browsing has become extremely unreliable since the upgrade. It seems that IE,Chrome cannot connect to certain websites even though they are alive when using an external pc to test.

eg: www.scanmyspeed.com I cannot connect to.

i have checked/tried the following.
1. nslookup www.scanmyspeed.com and it resolves to 13.89.237.178 from my pc.
2. host www.scanmyspeed.com from the firewall and it resovles fine.
3. telnet www.scanmyspeed.com 443 show a successful connection.
4. ipconfig /flushdns on my pc does not resolve issue.
5. turning off proxy settings in browers.
6. tcpdump -n |grep 13.89.237.178 shows traffic flowing through firewall
root@jsb-fw1:~ # tcpdump -n | grep 13.89.237.178
12:39:45.858649 IP 192.168.0.103.28256 > 13.89.237.178.443: Flags , seq 45952176, win 64240, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0
12:39:45.897047 IP 13.89.237.178.443 > 192.168.0.103.28256: Flags [S.], seq 2175862255, ack 45952177, win 8192, options [mss 1420,nop,wscale 8,nop,nop,sackOK], length 0
12:39:45.897339 IP 192.168.0.103.28256 > 13.89.237.178.443: Flags [.], ack 1, win 260, length 0
12:39:50.197108 IP 192.168.0.103.28256 > 13.89.237.178.443: Flags [P.], seq 1:2, ack 1, win 260, length 1
12:39:50.309252 IP 13.89.237.178.443 > 192.168.0.103.28256: Flags [.], ack 2, win 1026, length 0
12:39:55.461958 IP 192.168.0.103.28256 > 13.89.237.178.443: Flags [F.], seq 2, ack 1, win 260, length 0
12:39:55.496678 IP 13.89.237.178.443 > 192.168.0.103.28256: Flags [R.], seq 1, ack 3, win 0, length


I have turned off web proxy, tried both dnsmasq and unbound to no avail. No ids running

I have a standby ipfire and pfsense firewalls, and my pc works fine when communicating through them.

This is perplexing. Any help would be greatly appreciated.

Title: Re: browsing errors since upgrade to 18.7
Post by: cguilford on August 06, 2018, 08:17:02 pm

I know this sounds crazy, but are they hard wired or wireless?  Have you tried rebooting your Wireless access point?  I was having a similar issue, and had to restart my WAP.

Title: Re: browsing errors since upgrade to 18.7
Post by: jljb66 on August 06, 2018, 08:32:50 pm

I have both hardwired and a WAP.  I know that its not the issue because as soon as I hook up my pfsense firewall, access issue go away.  Something has changed since the upgrade.

Thanks anyways though.

Title: Re: browsing errors since upgrade to 18.7
Post by: Headologic on August 06, 2018, 11:02:08 pm

No errors occured if  i connect with my PC and OPNsense 18.7 on my APU1D-Board to described site.
A TCPDump does not give any errors. Everything seems fine to me. Maybe, it's your ISP?
Will that problem happen again when you go back to your OPNsense?

Title: Re: browsing errors since upgrade to 18.7
Post by: jljb66 on August 07, 2018, 01:04:06 am

It's definately not the ISP as I mentioned before, when I swap the firewall to pfsense or ipfire attaching to the same ISP, the problem goes away.

I will try to do a fresh install and see if the problem reoccurs however I was hoping that it would be in some log or a config entry I could change.