Report this

What is the reason for this report?

Firewall Rule Inbound Traffic

Posted on July 25, 2022
Yan

By Yan

As I was trying to edit firewall rules based on what I saw in this article (https://docs.digitalocean.com/products/networking/firewalls/how-to/configure-rules/), it appeared that some of my devices aren’t allowed to access VPN services (running on Wireguard), particularly in Uzbekistan. When I insert addresses, specified in network interface config file, e.g 10.10.10.1, inside Source field for a custom firewall rule the connection doesn’t work. Could anyone clarify what is wrong there?



This textbox defaults to using Markdown to format your answer.

You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

Hello,

I believe that it is not DigitalOcean that is blocking any countries specifically, but the local ISPs in those countries are blocking DigitalOcean.

You could try reaching out to your IPS and ask them to lift the block.

You can also run an mtr or a traceroute to figure out where exactly the connection is being dropped.

Best,

Bobby

The address you mentioned (10.10.10.1) is not an Internet address, it is only a local address a.k.a. “not routable”. It may be used by your VPN provider, but that will be enclosed in the VPN, and invisible to the firewall.

You need to figure out what Internet address your VPN software is actually using to connect to the VPN. That is NOT the address you gave. It is something else completely.

The developer cloud

Scale up as you grow — whether you're running one virtual machine or ten thousand.

Start building today

From GPU-powered inference and Kubernetes to managed databases and storage, get everything you need to build, scale, and deploy intelligent applications.