Question

Firewall Rule Inbound Traffic

As I was trying to edit firewall rules based on what I saw in this article (https://docs.digitalocean.com/products/networking/firewalls/how-to/configure-rules/), it appeared that some of my devices aren’t allowed to access VPN services (running on Wireguard), particularly in Uzbekistan. When I insert addresses, specified in network interface config file, e.g 10.10.10.1, inside Source field for a custom firewall rule the connection doesn’t work. Could anyone clarify what is wrong there?


Submit an answer

This textbox defaults to using Markdown to format your answer.

You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

Sign In or Sign Up to Answer

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

The address you mentioned (10.10.10.1) is not an Internet address, it is only a local address a.k.a. “not routable”. It may be used by your VPN provider, but that will be enclosed in the VPN, and invisible to the firewall.

You need to figure out what Internet address your VPN software is actually using to connect to the VPN. That is NOT the address you gave. It is something else completely.

Hello,

I believe that it is not DigitalOcean that is blocking any countries specifically, but the local ISPs in those countries are blocking DigitalOcean.

You could try reaching out to your IPS and ask them to lift the block.

You can also run an mtr or a traceroute to figure out where exactly the connection is being dropped.

Best,

Bobby