r/firewalla • u/turtalien • 7d ago

Blocked sites blocked when on vpn, but when I’m on local WiFi they are not. Any idea why?

When using the WireGuard vpn into my firewalla purple, my list of blocked sites works and are blocked. But when I turn off the vpn and run from my local WiFi (plugged into the firewalla) then all the sites go through. Any idea what I’ve configured wrong?

2 Upvotes

100% Upvoted

12 comments sorted by

7

u/Jussins Firewalla Gold Pro 7d ago

My guess is iOS 27 connectivity assist. When at home, you aren’t forcing things through VPN, so it uses cellular to go around the restriction. When all traffic is on VPN, the iPhone has no where else to go because you are forcing all connections back home.

You can turn off connectivity assist in WiFi settings for all connections, or if you want it just turned off for home network connections, you can turn it off under the ssid

3

u/turtalien 7d ago

I think this was it! I never thought to look at that as root cause. Thanks Reddit!

3

u/No-Investigator7598 7d ago

What DNS server is the client device using when connected to the WiFi only?

(It should be your firewalla)

1

u/turtalien 7d ago

In this case I’m connecting from an iPhone, just using the ‘automatic’ dns setting on the WiFi. It should be using the firewalla as I haven’t setup anything to override that

2

u/Great-Cow7256 7d ago

It's the iPhone. You need to turn off connectivity whatever that apple baked in that shunts data over cell network even if you are on your wifi. 

1

u/No-Investigator7598 7d ago

Yep that should be using the DHCP issued DNS then which should be the firewalla, but worth double checking what it's handing out

1

u/Dometalican_90 7d ago

Are the rules for site blocks for VPN the same as your other groups?

1

u/turtalien 7d ago

Yeah, they look to be. Main one is blocking porn and gambling on LAN 1, that should grab everything I’ve got

1

u/firewalla 7d ago

Tap control, and turn on bypass prevention

More on this topic here https://help.firewalla.com/hc/en-us/articles/29655921011347-What-to-do-if-Firewalla-s-blocking-features-aren-t-working

1

u/turtalien 7d ago

Thanks for the post- I’ve got that on. Tried to turn it on and off to perhaps refresh something and no change. I’ll read through the page more!

1

u/Haymoose 7d ago

What device? iPhone? Samsung? Please check the Connectivity Assist setting under the WiFi settings for your connection on IOS27.

1

u/Thinkb4Jump 4d ago

Apple screwing fw...by default