Can't reach wife's web site

The site is PaulaHooper.com. I know it’s working because the hosting company has checked and told me about GeoPeeker.com, which showed me it’s working in several places around the world and in the US. Also, if I turn off Wifi on my phone I can reach the site.

I switched the filtering to None for my PC, and it still doesn’t work. Nor does it show in the Blocked log.

I could reach it before installing AdamOne, we just hadn’t tried until now. So I can’t think of another cause. Any ideas?

TIA, Fred

Hi @Fred_H could you post what you’re seeing on http://mytools.management/log when you try to visit this site?

2:48:51 PM A www.paulahooper.com DESKTOP-UI5UPKT System - System no answer found for requested record type Rule: Allow, Policy: Unfiltered
2:48:51 PM AAAA www.paulahooper.com DESKTOP-UI5UPKT System - System no answer found for requested record type Rule: Allow, Policy: Unfiltered
2:48:51 PM A paulahooper.com DESKTOP-UI5UPKT System - System no answer found for requested record type Rule: Allow, Policy: Unfiltered
2:48:51 PM AAAA paulahooper.com DESKTOP-UI5UPKT System - System no answer found for requested record type Rule: Allow, Policy: Unfiltered

OK it appears that the upstream resolver you’re using is not providing an answer. What do you have your DNS Resolver set to under My Dashboard and if it’s set to a post rule processor please also post what you’ve setup at My Dashboard

DNS Resolver is set to DNSHarmony using CleanBrowsing Security Filter, 1.1.1.1 Malware Protection, 1.1.1.1 For Families, AdGuard DNS, OpenDNS Home, 1.1.1.1, OpenDNS Family Shield, and Quad9. I’m not lusing a post rule processor.

Also, I don’t understand why AdamOne is doing anything as my PC is temporarily set to Unfiltered.

OK, if your policy is unfiltered, adam:ONE will send the query to your router’s name-server. This is usually configured somewhere under your router settings or given by the ISP via DHCP.
You can check what yours are by looking at /etc/resolv.conf

As I use Win 10, I used a powershell command to get my DNS supplier:
Ethernet 2 13 IPv4 {192.168.5.1, 1.1.1.2}
Ethernet 2 13 IPv6 {2600:4040:5e53:6b00:2e0:67ff:fe26:5ae5, 2600:4040:5e53:6b00:2e0:67ff…

192.165.5.1 is my pfsense box. 1.1.1.2 (Cloudflare Families, current default in pfsense and fallback on Win10) is what I’ve used for several years, including before I installed AdamOne, and it always allowed us to connect to her web site (and still does on my phone). So I’m currently convinced that AdamOne is still processing the request despite the Unfiltered setting.

The only way I can think of testing this is to remove AdamOne and install one of my pre backups to pfsense. I’m willing to do this if it would help solve my issue; would you like me to do so?

OK so what I meant is check /etc/resolv.conf on your router, so pfSense® in your case.
So you can also go to System / General Setup as it’s listed there. There is also a setting on that page to decide whether to use the ISP provided nameservers.

From General Setup: 1.1.1.2; 1.0.0.2.
DNS Server Override is unchecked
DNS Resolution Behavior is the default; Use local DNS (127.0.0.1) and fallback to remote DNS Server

That’s interesting because I was expecting that resolver must be the issue. But I just verified that it’s not blocking the domain either :confused:

Maybe try to clear your DNS cache on your computer?

ipconfig /flushdns

Thanks. Just tried it, no luck. Same issue.

What happens when you ping the domain? Do you get a response?

Ping request could not find host paulahooper.com. Please check the name and try again.

When I set the filtering to Basic Filtering the result is the same and the rule applied is: System - System | no answer found for requested record type | Rule: DNSHarmony, Policy: Basic Filtering

@Fred_H could you run the command adamone-issue from a shell on your router, and send the file it generates to support@adamnet.works referencing this forum thread.

1 Like

I don’t know if this is useful information, but when I put in a Allow entry it only shows up if Unfiltered. In neither case can I get to the site.

2:50:15 PM A paulahooper.com DESKTOP-UI5UPKT System - System no answer found for requested record type Rule: Allow, Policy: Unfiltered
2:50:06 PM A www.paulahooper.com DESKTOP-UI5UPKT System - System no answer found for requested record type Rule: DNSHarmony, Policy: Basic Filtering

It seems like you have something upstream of the router messing with the DNS answer. But it’s not possible for us to tell from these logs.

What happens if on the pfSense shell itself, you run the command

dig www.paulahooper.com

what do you get back?

; <<>> DiG 9.18.19 <<>> www.paulahooper.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6296
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 16316
;; QUESTION SECTION:
;www.paulahooper.com. IN A

;; ANSWER SECTION:
www.paulahooper.com. 14400 IN CNAME paulahooper.com.
paulahooper.com. 14400 IN A 162.241.24.98

;; Query time: 229 msec
;; SERVER: 127.0.0.1#53(127.0.0.1) (UDP)
;; WHEN: Mon Aug 05 15:59:05 EDT 2024
;; MSG SIZE rcvd: 78

The only thing upstream from our pfsense box is a Verizon box.
Also, for a while on Saturday afternoon I could reach the site on Firefox but not on Chrome; this was true whether AdamOne was filtering or not. While this was so I couldn’t reach My Tools; all I got was a “You are unfiltered” message.

Hi @Fred_H , although perhaps unrelated to the initial issue reported here, if you’re getting the http://mytools.managment page to work on Firefox but not on Chrome, this is often the case when your devices’ network settings have 8.8.8.8/8.8.4.4 set as the options for your DNS server, rather then just your gateway IP as the DNS server. What happens then is that the SECURE DNS feature (now on by default) connects to Google for DNS instead of getting it’s answer from your gateway. Adjusting either one of those settings will likely resolve the mytools page issue for you. If this is the case, to prevent this entirely, if you choose a plan that includes DTTS® , it would prevent the DoH connection from being able to be made. Hope that helps.