Products Firewalla Gold SE Firewalla Gold Pro Firewalla Gold Plus Firewalla Purple Firewalla Purple SE Firewalla Wi-Fi SD Product Comparison Product Reviews

FWGSE is not actually blocking despite troubleshooting.

Follow
Avatar
Lily

My FWGSE has stopped actually blocking. For example if I block Facebook for a device, it doesn't actually block it - it slows things down, maybe doesn't load comments well, (sort of like Disturb is on) but allows access in general. So far this has been the case with two iPhones and a MacBook. It is not actually Disturb, it is blocking that is on, but still allowing access. 

I have followed all of the directions on the following pages:
 
 
Everything listed on that page is as it should be. So I followed this link from there... 
 
 
Everything listed on that page is as it should be *except* for DOH over HTTPS. When I click on the links list there, here's what happens:
 
Cloudflare: doesn't load at all, browsers can't find the page
Quad9: loads, but says I am not using quad9
Google: doesn't load at all, browsers can't find the page
OpenDNS: loads but says DOH not configured
 
And I did make sure to only have each one that I was testing turned on at a time, rather than having them all selected. 
 
So then I went to this page:
 
 
And everything is as it should be. Except the Cloudflare test link still doesn't work.
 
I am not using Family Protect or Unbound.
Browsers do not use DOH (Safari doesn't even support it).
Apple private browsing is not turned on.
Neither is Limit IP Address Tracking. 
 
I rebooted the Firewalla and that did not resolve anything. The DOH over HTTPS test pages are still not working, and I am still able to access Facebook after blocking my own phone from it to test it. 
 
What do I do now? Thank you!
0

Comments

2 comments

Sort by Date Votes
  • Avatar
    Firewalla

    Are you blocking DoH? (parental control?)

    Does this happen with only Apple devices?

    Double-check if you have iCloud Private Browsing on, or running any type of VPN

    Are your devices also managed by MDM or any enterprise security tools?

    If you block a device, does it still work?

    0
    Comment actions Permalink
  • Avatar
    Lily

    Hello,

    DOH: 
    - DNS over HTTPS is turned on. 
    - I have the rules set to block the Firewalla's DOH services target list for each user group, to ensure devices cannot bypass security and content filtering. 
    - I did this due to a set up guide I found. I do not wish to enable devices to bypass this by turning it off. Additionally, I've had it turned on since I set up the Firewalla, and the blocking was working before now. 

    Apple devices: I used a browser on a Google TV to check the Facebook block, the block appears to be working properly on that. That is the only non-Apple device we have that can access the Internet to check.

    iCloud Private Relay/Browsing: is turned off on all devices. 

    VPN: 
    - VPN server within Firewalla when devices are not connected via WiFi.
    - VPN client within Firewalla is set up, but not currently applied to any devices, so none of them are using it
    - The behavior is the same whether a device is connected via the WiFi (no VPN) or the VPN server via cell signal. 
    - No other VPN outside of the FW server and client is being used.

    MDM: None. 

    Blocked device: I'm not sure what you mean so I will answer broadly.

    Blocked from all social sites (via shortcut button in FW app):
    - iPhones and iPads: Doesn't seem to block any social apps at all, they still work, though glitchier.
    - Other devices, including MacBooks: Block works properly.
    - Checked to make sure it was "block" and not "disturb" - it is "block".

    Blocked from Facebook or Youtube only (via shortcut button in FW app):
    - iPhones and iPads: Still load new content from Facebook and Youtube, though comments don't load. Messenger still loads and works, too.
    - Other devices, including MacBooks: Block works properly. 

    Blocked from internet entirely (via shortcut button in FW app):
    - iPhones and iPads still load content from Facebook, Youtube, Instagram, Threads, but not regular sites or other apps (at least the ones I opened). 
    - All other devices, including MacBooks, properly blocked, no internet access. 

    It's like the social sites are suddenly impervious to blocks on the iPhones and iPads, all it does is make them a little glitchy. Blocking them did work until recently. I experimented with creating some new rules recently but have since deleted all of those. 

    Extra notes, in case they help with figuring out what the problem is:

    I have the rules turned on to block the following target lists:
    - OSID
    - All VPN sites
    - DoH Services
    - Apple Private Relay

    FW Ad Block is on, default mode.

    I used my iPhone for testing most of this, which is the only device that has the FW app on it. My iPad does not have the FW app but it behaved the same as my iPhone. 

    I have a Disturb rule set up for one of the iPhones, but the Disturb rules are kept disabled most of the time and are just there to quickly turn on and off when needed. And this problem is present even with iPhones that have no Disturb rule applied to them.

    I hope this helps figure out what the problem is. Thank you!

    0
    Comment actions Permalink

Please sign in to leave a comment.

Didn't find what you were looking for?

New post