ANSWERED Sites blocked duckduckgo.com tutanota.com techcrunch.com - SOLVED

[bdika 1]

I got Airvpn wireguard working on OPNsense using this link.

It works fine except I can't access the sites in the title. They time out. I imagine there are others but these are the only three I have found so far after approximately one week of usage.

I have tried different servers and for duckduckgo I tried the ip address but no results.

I am currently using the northamerican server. I have tried canada and a particular Toronto server with the same result.

Any help or suggestions would be much appreciated.

Thanks.

Bill Dika

SOLVED: I got this working using a detailed rule for MSS clamping by setting the it to 1300.

Firewall --> Settings --> Normalization --> Disable Interface Scrub --> Create Detailed Settings Rule --> Set max mss to 1300.

Edited ... by bdika
Solved

[OpenSourcerer 1441]

This keeps coming up now and then:No explicit mention of Wireguard, I assume it is, though:To summarize, no solution yet. Cause is unknown, too. Fallback to OpenVPN for now.

[bdika 1]

Hi Opensoucerer

Thanks for the reply.

I saw that post but I am used to the speed of wireguard and do not want to use OpenVPN if I can help it.

I can live with the limitations of wireguard for now but was hoping someone had some insight into why some sites were not working.

Thanks again for your reply. I may revert to OpenVPN in the future if this doesn't get resolved eventually.

[TheHellSite 2]

I would like to jump in here.

Just set up WireGuard on my OPNsense (latest OS and plugin) to get rid of OpenVPN.
It seems to be working almost perfectly fine.

However I am too experiencing issues with some sites, f.e. microsoft, duckduckgo, tutanota, protonmail, ...

I think it may be related to some geo-routing or DNS problems!
Visiting https://microsoft.nl will redirect and open https://www.microsoft.com/nl-nl/, even though it takes a few seconds.
Visiting https://www.microsoft.com/ works fine too and will redirect to https://www.microsoft.com/nl-nl/.

Visiting https://microsoft.com doesn't work at all and just displays "The connection has timed out" in firefox.
 

[TheHellSite 2]

Any news on this?

Wouldn't it be a good idea to create a dedicated forum for WireGuard BETA where participants can share and discuss issues? @Staff

[Staff 10014]

@TheHellSite

Hello!

A dedicated forum might be excessive, but dedicated threads are surely appropriate. The official thread followed by staff members can be found in the "News" forum, which is not a community forum. Any other thread can be created by the community in the proper community forum ("Troubleshooting" is fine) and followed by the community as usual.

Kind regards
 

[TheHellSite 2]

Thank you for clarifying this! @Staff

In the meantime I also found out that if you are only using IPv4 the issues are present, adding IPv6 to the config file seems to fix them.

[TheHellSite 2]

@Staff

Any updates one these issues?
To me it seems that they are resolved but I would like to get a confirmation on this, so I can switch all services back to WireGuard.

[Staff 10014]

2 hours ago, TheHellSite said:

@Staff

Any updates one these issues?
To me it seems that they are resolved but I would like to get a confirmation on this, so I can switch all services back to WireGuard.

Yes, the issues mentioned in this thread, according to our tests, were resolved in January, when you posted, and we archived the issue. Glad to see your confirmation.

Kind regards