Cannot access whatsapp web

[peterwkc]

Dear all forumers, I have opnsense installed as my firewal gateway but unfortunetely i cannot access whatsapp web.

How to diagnose this and resolve the problem?

[bartjsmit]

It works for me. Start here:

https://docs.opnsense.org/troubleshooting.html
https://www.makeuseof.com/tag/whatsapp-web-tips-tricks/

Does your DNS work? did you try a packet capture?

[peterwkc]

My DNS works since fine since browsing all others website is working. I had suricata and crowsec enable. How to diagnose it? What log to check it blocked the connection.

[EdwinKM]

Sure you did not enable some DNSBL lists? (dns sinkhole)

[bartjsmit]

I had suricata and crowsec enable

Start with reducing the problem. Disable all add-ons and plugins that are not required for whatsapp web (that will be a lot) Override your DNS by setting it to an external resolver (e.g. 1.1.1.1, 9.9.9.9, 8.8.8.8, etc)

If it works in this minimal configuration, add the stuff you disabled back in one at a time. Investigate the one that breaks it and/or consider its worth against having WhatsApp

Bart...

[peterwkc]

Thanks a lot for the suggesstion.

[peterwkc]

Sure you did not enable some DNSBL lists? (dns sinkhole)

How to check whether i had enable DNSBL lists?

[peterwkc]

How to check whether i had enable DNSBL lists?

[bartjsmit]

Back up your config and re-install OPNsense as simple as possible. Test whatsapp web and then add in features until it breaks. Don't fall into the trap of shotgun debugging http://www.catb.org/jargon/html/S/shotgun-debugging.html

[peterwkc]

I don't think start from fresh is a good idea since I had build the firewall server for quite some time. I think need to disable suricata IPS, crowsec and firewall block list.

I can ping 157.240.14.52 whatsapp web server but cannot access through web.


Please help me.,  without whatsapp web, it is like no life.

[bartjsmit]

I think need to disable suricata IPS, crowsec and firewall block list.

You mean like I suggested in my post almost exactly a week ago?!? 

Yes, pare down your config until it works and then build it back up until it doesn't and finally undo or fix the last step.

Bart...

[peterwkc]

Noted.