tuxornot

I have my pfsense firewall set up as described in the excellent nguvu.org guides, I have an always on airvpn connection and a few VLAN'S that run to the none VPN WAN interface.. Works fine most of the time, the hardware I use is a fanless intel five port minipc, there is also two non VPN LAN'S that use two hardware ports that also connect to the non vpn WAN interface. A problem arose when trying to use the Eddie airvpn client on one of the non VPN VLAN'S, or one of the non VPN LAN'S, Eddie refused to connect. The solution was simple, the nguvu.org guide shows how to create a 'Define local subnets' alias, or in the original pfsense guide it was called ' Private Networks'. example: 192.168.0.0/16 and then create LAN rules using this alias. Any private or local subnets not in this alias will not be processed as pfsense is unaware of anything except what is in provided in this alias, Eddie creates its own network for TUN ( I hope I have phrased this correctly ) so to solve the no connect issue a new private network 128.0.0.0/1 should be added to the Define local subnets alias. Not being an expert in networking it took quite a while to finally understand what was going on, reading the Eddie logs. the pfsense logs and pulling out what is left of my hair, Eventually I reset pfsense and rebuilt one LAN using the guide for testing, everything worked until I created the Local Subnet alias and associated LAN rules, that is when I had the light bulb moment ! I thought I would post this here in case it may help anyone with the same issue. This problem would have been easier to solve but networking is not my strong point !

I get a blank page but can access it on a non airvpn connection.

Same problems on Asterop :-(

Thanks for replying giganerd, I have tried all the UK based servers and keep receiving the 403, if I bypass the vpn the page loads. I use pfsense and one vpn server at a time, went through all of the servers, cleared the cache (s) and rebooted pfsense, still the same thing, I have airvpn DNS set in pfsense so I wonder if that could cause the problem ?

https://www.wickes.co.uk/ Can not reach this website using any of Airvpn UK servers, I get 403 Forbidden on each search attempt. I can reach it and browse if I bypass airvpn and can reach it and browse on my mobile phone over the O2 network, the site worked fine a few days ago and seems ok using airvpn router checker so I presume airvpn has been added to a block blacklist somewhere.

Add to that a few UK servers throwing up googles captas, Naos for one.

As a Test I changed airvpn server to Asterion and the Screwfix forum is now showing and working so there appears to be a problem with Arion.

Changes Airvpn server to Arion and when accessing screwfix comunity forums (UK) I get a blank page, works ok over non vpn, had this issue before but never reported it till now. The link to the page is : https://community.screwfix.com/

I have the same issue with 'DNS address 0 Servers 100 Errors', Only found it during a daily leak test, other dns sites produce normal results, Im guessing its the airvpn test thats a bit iffy. --

Just changed server to another address and got the site to load, odd because it showed all green like the previous servers did, thank you !

Thank you LZ1, I checked with the rout checker and the 2 servers I have tried show green / direct but I still get the error accessing the site.

​ Just found out that: ​ ​https://tuclothing.sainsburys.co.uk/ Is blocked on Airvpn, can be reached using a 'free proxy server' ( While on Airvpn ) Have tried a few vpn servers, same problem, Typical cloudfront error message: ​ ERROR The request could not be satisfied.Request blocked. Generated by cloudfront (CloudFront)Request ID: TO7Bwiwi1Wjl7hfYsZw2fIxCcCff5iGx3da_4H5q8K42uuJLjaALJw==​ ​There is no way I will drop a vpn to access a shopping site, other people in this house don’t agree with my stance ! ​ ​ ​ ​ ​ ​ ​ ​

Thank you for posting this, makes an interesting read. Once private entities become involved with data in this way the only possible outcome will be a huge mess or as we say over here 'strong and stable' ! /s As a user of posteo I often take it for granted, I sometimes forget that its there, in the background working seamlessly, your post reminded me to actually visit the website and have a good read :-) --