I have a firewall rule that blocks custom-category 'youtube'
i disabled DPI because at the beggining started to work well. but from one moment to another he blocked also google
First i disabled the firewall rule that drop this and enabled again, but it does not work.
Then i created and deleted the rule again with the same result.
In short the blockade stop working.
Someone know a solution first:
- so that trayng to block youtube does no block google
- fix firewall error.
- also i thinking to restart dpi deault or restart service but i don't know how
Mi config
-------------------------------------------------------------------------------- FIREWALL -------------------------------------------------------------------------------- firewall { all-ping enable broadcast-ping disable group { network-group PRIVATE_NETS { network 192.168.0.0/16 network 172.16.0.0/12 network 10.0.0.0/8 } } ipv6-receive-redirects disable ipv6-src-route disable ip-src-route disable log-martians disable modify balance { rule 10 { action modify description "do NOT load balance lan to lan" destination { group { network-group PRIVATE_NETS } } modify { table main } } rule 20 { action modify description "do NOT load balance destination public address" destination { group { address-group ADDRv4_eth0 } } modify { table main } } rule 30 { action modify description "do NOT load balance destination public address" destination { group { address-group ADDRv4_eth1 } } modify { table main } } rule 100 { action modify modify { lb-group G } } } name BLOCK_SITES { default-action accept description BLOCK_SITES rule 10 { action drop application { custom-category DROP_YOU } description BLK_YOUTUBE } } name WAN_IN { default-action drop description "WAN to internal" rule 10 { action accept description "Allow established/related" state { established enable related enable } } rule 20 { action drop description "Drop invalid state" state { invalid enable } } } name WAN_LOCAL { default-action drop description "WAN to router" rule 10 { action accept description "Allow established/related" state { established enable related enable } } rule 20 { action drop description "Drop invalid state" state { invalid enable } } } receive-redirects disable send-redirects enable source-validation disable syn-cookies enable } -------------------------------------------------------------------------------- TRAFFIC ANALYSIS -------------------------------------------------------------------------------- traffic-analysis { custom-category DROP_YOU { name Youtube } dpi enable export enable }