Some websites and apps won't work with eBlocker

19 Posts
3 Users
0 Reactions
72 Views
(@facebita)
Estimable Member
Joined: 5 Jahren ago
Posts: 137
Topic starter  

Sometimes some websites are not available. At last for instance kuketz-forum.de. Or some apps are not working, at the moment the ING banking app on iOS. This only happens on devices connected with my WLAN, but independently whether a device is using eBlocker or not. So, the only eBlocker provided function that these devices are using, is the DHCP server - becauce I use the manual settings for running a Fritzbox 7690 as internet access and WLAN router. When a device is not connected with my WLAN all websites and app services work properly. 

What should I do in order to make all websites and services available for devices in my WLAN independently of using eBlocker or not?

Or - at least - what I have to do in order to find what causes this misbehaviour?



   
ReplyQuote
(@random)
Illustrious Member Admin
Joined: 6 Jahren ago
Posts: 2125
 

Posted by: @facebita

Or - at least - what I have to do in order to find what causes this misbehaviour?

From the vage error description I can only guess the DNS servers set in eBlockerOS are unreliable. See: https://eblocker.org/en/docs/dns-firewall/#1-toc-title

Check the corresponding columns and - if they show red, remove the entry. Hint: by setting the IP of your router as DNS server you can eliminate doubt of cause.

Another guess: DNS over Tor is enabled. Try disabling. 

To stop guessing and find the issue, please try following this: https://eblocker.org/community/announcements/before-posting-here-please-read/#post-117

THX!



   
ReplyQuote
(@facebita)
Estimable Member
Joined: 5 Jahren ago
Posts: 137
Topic starter  

@random One issue remained: The ING app 8.36.2 on iOS 18.6.2 won't show the account balances if the iPhone is connected with eBlockers DHCP server. All other functionality in the ING app works properly. And the misbehavious occures independently of whether eBlocker is pausing or inactivated or active for the iPhone.

Both the DNS servers 1.1.1.1 and 9.9.9.9 are "fast" and "high".

Unter local device names I see (where fritz.box is marked as user defined input):

dnscheck.eblocker.com
192...45
fe80...:6ad9
 
dnscheck.eblocker.org
192...45
fe80...:6ad9
 
eblocker.box
192...45
fe80...:6ad9
 
fritz.box
192...1
fd0e...:fec5:275a
 
www.eblocker.box
192...45
fe80...:6ad9

DNS over Tor is not enabled.



   
ReplyQuote
(@random)
Illustrious Member Admin
Joined: 6 Jahren ago
Posts: 2125
 

@facebita Again, I'm not even sure what the issue is, as you only provided a very vage description.

Not answering my request about your tech environment (the standard support questions from the Read Me) is not helpful either.

Sorry mate, but I can't help with a solution if you don't feel like helping with clear information. 

THX!



   
ReplyQuote
(@facebita)
Estimable Member
Joined: 5 Jahren ago
Posts: 137
Topic starter  
  • Hardware you use for running eBlockerOS

Raspberry Pi3 4GB RAM

  • eBlockerOS version as well as filter lists version

Last current version (subscriber updates)

  • eBlocker network mode (auto, individual or expert)

individual, with Fritzbox 7690

  • eBlocker network settings (IP, mask, gateway)

IP 192.168.178.45

mask 255.255.255.0

gateway 192.168.178.1

  • Which devices runs DHCP server? Router/external, eBlocker or client fixed IP?

eBlocker

  • IPv6 disabled for client/network?

enabled

  • eBlocker DNS firewall settings

using eBlocker as firewall enabled

external DNS server enabled

  • Client network settings (IP, mask, DNS, gateway)

IP 192.168.178.82

(at the moment I am via eBlocker VPN connected with my home network within the eBlocker. Therefore, I think I can not see on my iPhone with OpenVPN app the values for mask, DNS, gateway.) 

  • Whether eBlocker’s https integration is enabled for client 

yes

  • Client browser and OS version (i.e. FireFox 80.1 running on macOS 13.4)

Firefox app on iOS 18.6.2

  • Additional non default Blockers enabled? (like DuckDuckGo, Consent-Blocker, custom lists etc.)

nothing

  • HTTPS Auto Trust App enabled?

no

  • Exact way or a link / screenshot to reproduce the issue

launching ING app on iPhone > logging in > a box appears "Sorry. Leider ist ein Fehler aufgetreten. Versuchen Sie es am besten später nochmal. OK" 100% reproducable. And never appears, when connect with any other network than those were eBlocker provides the DHCP server.

  • If VPN or Tor is enabled for the client in eBlocker (and which VPN provider you are using)

The failure appears both, as well when connected via eBlocker built-in VPN capability as also when connected directly via Fritzbox WIFI

  • Are automatic updates enabled?

yes

  • Run the Function Test in the eBlocker Dashboard (Note: The test is device dependent - check it for each device)

done. but no effect

  • Make sure "eBlocker.org" is not on the HTTPS Trusted Website list (otherwise Function Test fails)

done.

  • Check the eBlocker Doctor (Settings> Doctor) for configuration issues

no issues



   
ReplyQuote
(@benne)
Famed Member Admin
Joined: 6 Jahren ago
Posts: 1112
 

@facebita 

I'm also using the ING app on iOS and have no problems at all, when connected to my eBlocker protected WLAN or via eBlocker Mobile. So it's not a general problem but some issue with your setup.

Do you have the "German Banks" pre-defined Trusted App activated? (I have it activated) 

Please share a list (or screenshot) of your activated Trusted Apps (HTTPS> Trusted Apps: Click on the first column to sort by enabled apps).

Also: Try switching from Automatic Network to Individual Network configuration. Usually this solves all network related issues, which I fear could be the case here. 

To rule out any other sources of trouble you should try this when connected straight to your WLAN (not using VPN).

Please check the result of ipv6.eblocker.org and also ipv4.eblocker.org and let me know the result. 



   
ReplyQuote
(@facebita)
Estimable Member
Joined: 5 Jahren ago
Posts: 137
Topic starter  

@benne I have activated in "Trusted Apps": 

  • German Banks
  • Deutsche Post Shop
  • DB Navigator
  • AusweisApp2
  • Wetterdienst

I have activated "Individual Network Configuration".

It makes no difference whether I am straight in my WLAN or connected via VPN. I will add in the post above the client's network values for mask, DNS, gateway

https://ipv6.eblocker.org/ resulted in "could not be connected"

https://ipv4.eblocker.org/ resulted in:

 

You have reached this server via IPv4.
Your IPv4 address is:
82.82.134.174

The very odd behaviour is, I am obviously logged in with ING app in my banking account. The only feature that is not available is the "Accounts" area - most left button in the bottom line.



   
ReplyQuote
(@benne)
Famed Member Admin
Joined: 6 Jahren ago
Posts: 1112
 

Posted by: @facebita

The only feature that is not available is the "Accounts" area

Works for me - as well as all other functions of the ING app: no problem at all.

I have no idea why this is different for you.

Are you using the latest app version?

What's the error you are getting when ? 



   
ReplyQuote
(@facebita)
Estimable Member
Joined: 5 Jahren ago
Posts: 137
Topic starter  

Posted by: @benne

Are you using the latest app version?

Yes. 

What's the error you are getting when ? 

"Sorry. Leider ist ein Fehler aufgetreten. Versuchen Sie es bitte später nochmal. OK"

I have deleted the app from my iPhone and later re-installed from Appstore. Same behaviour.

In my naive imagination, there should be a log file on the eBlocker that records which request it received from the ING app when the account balances are called up by the user and what happens or even does not happen afterwards. From this, one could perhaps deduce why the error message appears.



   
ReplyQuote
(@random)
Illustrious Member Admin
Joined: 6 Jahren ago
Posts: 2125
 

Posted by: @facebita

here should be a log file on the eBlocker that records which request

It's a little more sophisticated than a log file: The Blocker Analysis (Settings> Blocker> (tab) Analysis Tool)

You can give it a try, but honestly, I fear it's to technical for this case (and tech inexperienced users).

You might be better off with the simpler HTTPS recording as there is probably a domain that @benne has on the whitelist but you don't. See Settings> HTTPS> (tab) Manual Recording.

And BTW: There is vast documentation about both features in the docs.

Unfortunately I can't help as I don't have an ING account.

THX!



   
ReplyQuote
(@facebita)
Estimable Member
Joined: 5 Jahren ago
Posts: 137
Topic starter  

In

eblocker-diagnostics-report/syslog.log

I found a suspect line:

Sep 25 21:25:28 eblocker Tor-eblocker[25450]: Problem bootstrapping. Stuck at 20%: Asking for networkstatus consensus. (No route to host; NOROUTE; count 1; recommendation warn; host B6942C63F1A596E6557D13FC0ACF8475A0A2AD3F at 89.41.173.138:443)

But why I can not add in eBlocker the IP address at the and of that line as trustworthy website?



   
ReplyQuote
(@benne)
Famed Member Admin
Joined: 6 Jahren ago
Posts: 1112
 

@facebita 

I've installed a brand new eBlockerOS and tested the ING iOS app. No problem at all.

The error message above points to Tor and is very probably completely irrelevant to your issue. 

Hope you are not trying to use Tor to connect to ING as this will probably fail. Tor should only be used in case of VERY high security interactions with sites you don't trust. As a tech novice I would not use Tor.

So make sure Tor is DISABLED for your device when accessing the bank! Above you didn't answer this question, so I thought Tor was disabled. 🤷

BTW: Tor-network blocking has nothing to do with eBlockerOS. Tor is used by hackers a lot so most banks and other big services block all traffic from Tor.

If the problem persists I fear, I can can't help. It's probably some very "individual configuration" on your side. Then I would recommend a reinstall or factory reset of eBlockerOS.



   
ReplyQuote
(@random)
Illustrious Member Admin
Joined: 6 Jahren ago
Posts: 2125
 

@benne Thanks very much for your support and the analysis. 

@facebita If you are using Tor, make sure to read the docs: https://eblocker.org/en/docs/the-eblocker-tor-network-feature/

Here it reads

Our tip: Enable Tor only if you call up sites with sensible content and you want to make sure that you cannot be identified with your IP-address under no circumstances. For example, you can enable Tor while researching health issue related subjects; if you want to ensure that the according health portal can never identify your identity and therefore can relate to your researched illnesses.

My very personal recommendation to you as a support intensive user: It's not a good idea to enable features if you are not 100% sure of the function. So if you are not sure about Tor and it's side effects, do NOT use it. Easy.

THX!



   
ReplyQuote
(@benne)
Famed Member Admin
Joined: 6 Jahren ago
Posts: 1112
 

@facebita

I just validated: If Tor is enabled, the ING app does not work. As said, this has nothing to do with eBlockerOS but banks are blocking Tor most of the time.

Make sure to disable Tor for ALL your devices having trouble to access certain websites/apps as this is very probably the cause of trouble. 

A feedback if Tor was the culprit would be great.

Thanks 👍



   
ReplyQuote
(@facebita)
Estimable Member
Joined: 5 Jahren ago
Posts: 137
Topic starter  

Posted by: @benne

So make sure Tor is DISABLED for your device when accessing the bank! Above you didn't answer this question, so I thought Tor was disabled.

The dashboard shows no active network. So I thought, no Tor is enabled. I never enabled Tor for any of my devices - at least not consciously.

But in the eBlocker web interface in section IP-Anonymization I now detected under the tab Tor network the checkbox "chose automatically best route and exit knot". Does it mean, Tor is enabled?



   
ReplyQuote
(@random)
Illustrious Member Admin
Joined: 6 Jahren ago
Posts: 2125
 

Posted by: @facebita

"chose automatically best route and exit knot". Does it mean, Tor is enabled?

No. This is just a configuration that is only used if Tor is enabled.

You need to check if Tor is enable on your iPhone while it's connected to your WLAN. IP-anonymization (via Tor or VPN) is always device individual - so you need to check this on the device itself!

Just visit the Privacy Check in the upper right corner of our website with your iPhone. If the location and provider matches to your home, then Tor is not enabled. Switch on Tor (using the Controlbar or Dashboard on your iPhone) to see what it looks like when Tor is enabled. Don't forget to disable after checking.

If Tor was not the culprit, I agree with @Benne: Install eBlockerOS anew or make a factory reset to get rid of some the strange config you might have accidentally introduced. The behavior is not normal.

THX!



   
ReplyQuote
(@benne)
Famed Member Admin
Joined: 6 Jahren ago
Posts: 1112
 

@facebita 

One thing I did not mention: I've opted-out of tracking within the ING app. Not sure if this makes a difference, as I believe Tor is the cause of your issues.

One addition: you can also check whether Tor is enabled by using the Remote Dashboard of the device or check the tab Anonymization unter Settings > Devices > [choose device].

Good luck!



   
ReplyQuote
(@facebita)
Estimable Member
Joined: 5 Jahren ago
Posts: 137
Topic starter  

@random When I enable Tor on my iPhone the ING app don't let me log in to my banking account. If I - as before - disable Tor I can log into my banking account and all banking features are available with one exception - as said before - I cannot see my accounts balances.



   
ReplyQuote
(@random)
Illustrious Member Admin
Joined: 6 Jahren ago
Posts: 2125
 

@facebita 

If Tor is not the issue, we can't help since the ING app works just fine with a standard eBlockerOS on iOS devices. Without the possibility to reproduce the issue, I fear a factory reset might be your best choice.

Good luck, anyways! 

THX!



   
ReplyQuote

Nach oben scrollen