Family Protect - whitelist

Comments

7 comments

  • Avatar
    Firewalla

    By white list meaning "don't block these?"  It may be possible with the newer code that one of our engineers is working on.  Any use case on this that you can share?

    2
    Comment actions Permalink
  • Avatar
    Christopher J. Shaker

    As a retired Cisco router developer, I'm amazed that a Firewall product did not have a whitelist feature (and a Blacklist feature) from day one. Seems pretty standard for firewalls?

    Firewalla appears to be breaking the video feeds from the EyeonBend website. This is a website that my wife uses to check the crowds in various areas where she wants to go for a walk. She uses the cameras to see whether or not it is too crowded for her to maintain social distancing while walking the dogs.
    https://www.eyeonbend.com/downtown

    Chris Shaker

    0
    Comment actions Permalink
  • Avatar
    Bob O'Hara

    It’s curious... I see the video on the site just fine by following the link in your post. Have you responded to a Video Activity alarm by blocking all video at some time in the past?

    1
    Comment actions Permalink
  • Avatar
    Christopher J. Shaker

    Nope. I see video from other devices, like my Blink cameras, and by DoorBird. I can watch YouTube videos.

    Chris

    0
    Comment actions Permalink
  • Avatar
    Christopher J. Shaker

    Bob:

    Thank you for your response.  The fact that it is working for YOU inspired me to check my rules one by one, pausing them one at a time.

    Because of an Alert I got from Firewalla, I had let Firewalla block all traffic to 67.210.198.15

    If I pause that rule, the EyeonBend cameras work.

    Is there an easy way to see the archived alerts, to see why that domain set off an Alert from Firewalla?

    Thank you again,
    Chris

    0
    Comment actions Permalink
  • Avatar
    Christopher J. Shaker

    Corrected my post. Due to latency in actually disabling the rules, I fingered the wrong IP address. It was really 67.210.198.15 that I was blocking that was biting me. Turns out that it is in Redmond, OR, so it even makes sense that was the cause.

    Thank you very much for your help!
    Chris Shaker

    DNS records and worldwide DNS propagation checker

    Home
    Flush DNS
    DNS Servers
    Reverse DNS Lookup
    All Tools

    Your IP : 71.34.101.244
    DNS Checker
    IP WHOIS Lookup
    IP WHOIS Lookup
    IP Whois Lookup Tool provides free IP Lookup Service to check who owns an IP Address. Just enter an IP and Lookup IP Address to find which organization or individual owns the particular IP Address.

    Enter any Valid IP Address:
    67.210.198.15
    Use any IPV4 / IPV6 Address or your own IP

    WHOIS Lookup ( 67.210.198.15 )
    #
    # ARIN WHOIS data and services are subject to the Terms of Use
    # available at: https://www.arin.net/resources/registry/whois/tou/
    #
    # If you see inaccuracies in the results, please report at
    # https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
    #
    # Copyright 1997-2020, American Registry for Internet Numbers, Ltd.
    #

     

    # start

    NetRange: 67.210.192.0 - 67.210.207.255
    CIDR: 67.210.192.0/20
    NetName: NEWQC-2
    NetHandle: NET-67-210-192-0-1
    Parent: NET67 (NET-67-0-0-0-0)
    NetType: Direct Allocation
    OriginAS: AS30583
    Organization: Quantum Communications LLC (QCL-5)
    RegDate: 2007-08-21
    Updated: 2012-02-24
    Comment: NOC2296-ARIN
    Ref: https://rdap.arin.net/registry/ip/67.210.192.0


    OrgName: Quantum Communications LLC
    OrgId: QCL-5
    Address: 258 SE Salmon Ave
    Address: P.O. Box 1748
    City: Redmond
    StateProv: OR
    PostalCode: 97756
    Country: US
    RegDate: 2003-02-28
    Updated: 2014-07-23
    Ref: https://rdap.arin.net/registry/entity/QCL-5


    OrgNOCHandle: NOC2296-ARIN
    OrgNOCName: Network Operations Center
    OrgNOCPhone: +1-866-366-2638
    OrgNOCEmail: support@lsnetworks.net
    OrgNOCRef: https://rdap.arin.net/registry/entity/NOC2296-ARIN

    OrgAbuseHandle: NOC2296-ARIN
    OrgAbuseName: Network Operations Center
    OrgAbusePhone: +1-866-366-2638
    OrgAbuseEmail: support@lsnetworks.net
    OrgAbuseRef: https://rdap.arin.net/registry/entity/NOC2296-ARIN

    OrgTechHandle: NOC2296-ARIN
    OrgTechName: Network Operations Center
    OrgTechPhone: +1-866-366-2638
    OrgTechEmail: support@lsnetworks.net
    OrgTechRef: https://rdap.arin.net/registry/entity/NOC2296-ARIN

    RTechHandle: NOC2296-ARIN
    RTechName: Network Operations Center
    RTechPhone: +1-866-366-2638
    RTechEmail: support@lsnetworks.net
    RTechRef: https://rdap.arin.net/registry/entity/NOC2296-ARIN

    RAbuseHandle: NOC2296-ARIN
    RAbuseName: Network Operations Center
    RAbusePhone: +1-866-366-2638
    RAbuseEmail: support@lsnetworks.net
    RAbuseRef: https://rdap.arin.net/registry/entity/NOC2296-ARIN

    RNOCHandle: NOC2296-ARIN
    RNOCName: Network Operations Center
    RNOCPhone: +1-866-366-2638
    RNOCEmail: support@lsnetworks.net
    RNOCRef: https://rdap.arin.net/registry/entity/NOC2296-ARIN

    # end


    # start

    NetRange: 67.210.198.0 - 67.210.198.255
    CIDR: 67.210.198.0/24
    NetName: BENDSYNCLTD
    NetHandle: NET-67-210-198-0-1
    Parent: NEWQC-2 (NET-67-210-192-0-1)
    NetType: Reassigned
    OriginAS:
    Customer: Bend Sync LTD (C04733650)
    RegDate: 2013-10-16
    Updated: 2013-10-16
    Ref: https://rdap.arin.net/registry/ip/67.210.198.0


    CustName: Bend Sync LTD
    Address: 920 SW Emkay
    Address: Suite 107
    City: Bend
    StateProv: OR
    PostalCode: 97702
    Country: US
    RegDate: 2013-10-16
    Updated: 2013-10-16
    Ref: https://rdap.arin.net/registry/entity/C04733650

    OrgNOCHandle: NOC2296-ARIN
    OrgNOCName: Network Operations Center
    OrgNOCPhone: +1-866-366-2638
    OrgNOCEmail: support@lsnetworks.net
    OrgNOCRef: https://rdap.arin.net/registry/entity/NOC2296-ARIN

    OrgAbuseHandle: NOC2296-ARIN
    OrgAbuseName: Network Operations Center
    OrgAbusePhone: +1-866-366-2638
    OrgAbuseEmail: support@lsnetworks.net
    OrgAbuseRef: https://rdap.arin.net/registry/entity/NOC2296-ARIN

    OrgTechHandle: NOC2296-ARIN
    OrgTechName: Network Operations Center
    OrgTechPhone: +1-866-366-2638
    OrgTechEmail: support@lsnetworks.net
    OrgTechRef: https://rdap.arin.net/registry/entity/NOC2296-ARIN

    RTechHandle: NOC2296-ARIN
    RTechName: Network Operations Center
    RTechPhone: +1-866-366-2638
    RTechEmail: support@lsnetworks.net
    RTechRef: https://rdap.arin.net/registry/entity/NOC2296-ARIN

    RAbuseHandle: NOC2296-ARIN
    RAbuseName: Network Operations Center
    RAbusePhone: +1-866-366-2638
    RAbuseEmail: support@lsnetworks.net
    RAbuseRef: https://rdap.arin.net/registry/entity/NOC2296-ARIN

    RNOCHandle: NOC2296-ARIN
    RNOCName: Network Operations Center
    RNOCPhone: +1-866-366-2638
    RNOCEmail: support@lsnetworks.net
    RNOCRef: https://rdap.arin.net/registry/entity/NOC2296-ARIN

    # end

     

    0
    Comment actions Permalink
  • Avatar
    Bob O'Hara

    Chris,

    If you tap into the Alarms panel, at the top right corner is a squarish icon (I think it is supposed to resemble a file box). Tap that icon to see an archive of alarms. Depending on how long ago the alarm you are seeking appeared, it may or may not still be in the archive.

    Given the IP address you blocked is located in China, it may indicate there is a hack present in the eyeonbend web site. You might want to contact the webmaster there to see if they need to do some investigating.

    -Bob

    0
    Comment actions Permalink

Please sign in to leave a comment.