Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 76 replies
  • Subscribers 1 subscriber
  • Views 324658 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Exception rule for Netflix streaming?

autumnwalker
I have recently started using Netflix again and am having trouble with it streaming to devices behind my UTM. I'm 99% sure it's due to the content filter and requires an exception rule; I have never been good with these rules and am wondering if anyone has created a rule for Netflix already?

I have "Bypass content scanning for streaming content" enabled which has not made a difference. When I add specific devices to the "transparent mode skiplist" they instantly work.


This thread was automatically locked due to age.
Parents
  • 0
    My rule list looks like this at this time.  I had to add the last two subnets this week and all is working fine with Web Protection and Antivirus turned on in Transparent mode.  All of my iPhones,iPads and AppleTV's in the house work just fine also without creating a Skip rule for them..

    ^https?://([A-Za-z0-9.-]*\.)?nflximg\.com\.?/
    ^https?://([A-Za-z0-9.-]*\.)?nflxvideo\.net\.?/
    ^https?://([A-Za-z0-9.-]*\.)?netflix\.com/
    ^https?://[\d+(\.\d+){3}/]*/[0-9]{8}\.ism
    ^https?://[\d+(\.\d+){3}/]*/[0-9]{9}\.ism
    ^https?://[\d+(\.\d+){3}/]*/[0-9]{10}\.ism
    ^http?://([A-Za-z0-9.-]*\.)?netflix-*.vo.llnwd.net/.*
    ^http?://23.7.139.*
    ^https?://secure\.netflix\.com/*
    ^https?://uiboot\.netflix\.com/*
    ^https?://108.175.41.*
    ^https?://108.175.40.
  • 0 in reply to TheEther
    My rule list looks like this at this time.  I had to add the last two subnets this week and all is working fine with Web Protection and Antivirus turned on in Transparent mode.  All of my iPhones,iPads and AppleTV's in the house work just fine also without creating a Skip rule for them..

    ^https?://([A-Za-z0-9.-]*\.)?nflximg\.com\.?/
    ^https?://([A-Za-z0-9.-]*\.)?nflxvideo\.net\.?/
    ^https?://([A-Za-z0-9.-]*\.)?netflix\.com/
    ^https?://[\d+(\.\d+){3}/]*/[0-9]{8}\.ism
    ^https?://[\d+(\.\d+){3}/]*/[0-9]{9}\.ism
    ^https?://[\d+(\.\d+){3}/]*/[0-9]{10}\.ism
    ^http?://([A-Za-z0-9.-]*\.)?netflix-*.vo.llnwd.net/.*
    ^http?://23.7.139.*
    ^https?://secure\.netflix\.com/*
    ^https?://uiboot\.netflix\.com/*
    ^https?://108.175.41.*
    ^https?://108.175.40.


    until the 108.x.x.x changes then it won't work.  the same for the 23....
    there is a dns resolution problem within the proxy that is causing the need for these massive skiplists.  I'm writing up a highly technical document so it can be sent to their escalation team..[:)]

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

Reply
  • 0 in reply to TheEther
    My rule list looks like this at this time.  I had to add the last two subnets this week and all is working fine with Web Protection and Antivirus turned on in Transparent mode.  All of my iPhones,iPads and AppleTV's in the house work just fine also without creating a Skip rule for them..

    ^https?://([A-Za-z0-9.-]*\.)?nflximg\.com\.?/
    ^https?://([A-Za-z0-9.-]*\.)?nflxvideo\.net\.?/
    ^https?://([A-Za-z0-9.-]*\.)?netflix\.com/
    ^https?://[\d+(\.\d+){3}/]*/[0-9]{8}\.ism
    ^https?://[\d+(\.\d+){3}/]*/[0-9]{9}\.ism
    ^https?://[\d+(\.\d+){3}/]*/[0-9]{10}\.ism
    ^http?://([A-Za-z0-9.-]*\.)?netflix-*.vo.llnwd.net/.*
    ^http?://23.7.139.*
    ^https?://secure\.netflix\.com/*
    ^https?://uiboot\.netflix\.com/*
    ^https?://108.175.41.*
    ^https?://108.175.40.


    until the 108.x.x.x changes then it won't work.  the same for the 23....
    there is a dns resolution problem within the proxy that is causing the need for these massive skiplists.  I'm writing up a highly technical document so it can be sent to their escalation team..[:)]

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

Children
Unfiltered HTML