Skynet Skynet is blocking my netflix!

[timonoj]

Hi guys!

So...a simple one, but I can't quite fix it. Seems skynet is blocking the IMAGES on netflix. That means, the miniatures any netflix app or the browser version load of the shows on the main screen. So, if you go and blindly click anything, you get to see the trailer or even the movie/tv show itself, but no images for the background or the miniatures are loaded.

If I disable Skynet temporarily, netflix goes back to working as expected on all devices.
I noticed my browser dying while "connecting to occ-0-212-395.1.nflxso.net", so I attempted whitelisting this nflxso domain altogether, but it gives me an "nslookup can't resolve nflxso.net". Which is weird...I guess. I finally managed to just whitelist the full "occ-0-212-395.1.nflxso.net", but I'm not sure at all this is a permanent solution. I reckon there must be a crapton of servers and subdomains running with weird names such as that, and the moment netflix needs just a slightly different address, I'll be crapped out again.
Any idea how could I whitelist netflix properly?

 

[Adamm]

It was probably a false positive on one of the sourced reputation lists via banmalware. Just follow the guide and whitelist it accordingly.

https://github.com/Adamm00/IPSet_ASUS/wiki#applicationexe-or-websitecom-is-blocked

 

[timonoj]

Thanks! Let me see if I figure it out

 

[Floyd]

I have the same problem. It is worse because even after uninstalling Skynet, Netflix does not load properly. Despite the description of tracking blocked IPs, I do not see IP for Netflix there. Could the lock be elsewhere? Netflix works fine on cellular and other networks

 

[L&LD]

Welcome to the forums @Floyd.

After uninstalling Skynet, did you reboot all related network equipment (infrastructure and client devices) before you tested it? This is to ensure that your observed results are not from previously cached values.

 

[Floyd]

Yes. After uninstalling, I restarted the router and the applications on the phone. I'll run tests tomorrow. After a VPN from another network to a network that doesn't work, Netflix works great. Maybe I need to wait a bit for the data to refresh.

The worst thing is that I can't use the instructions given by the author of the script. In my opinion, Netflix IP will not appear at all when debugging connections.

 

[L&LD]

Netflix works great on a network that doesn't work? ???

 

[Floyd]

I live in two places. In the latter, I connected the VPN to what does not work and the VPN on the network where Netflix did not start. After the VPN worked.

And yet a VPN is like the same network.

 

[L&LD]

I'm so confused

 

[Floyd]

@L&LD
I'm sorry for that.

I did a test again after a fresh installation of Skynet and unfortunately Netflix "works a little".
Something will start on the phone. I can't even log in to my PC.

The debugger says shows me something like this:

Sep 13 08:12:27 kernel: [BLOCKED - INBOUND] IN=ppp0 OUT= MAC= SRC=223.71.167.166 DST=***.**.***.*** LEN=44 TOS=0x00 PREC=0x00 TTL=114 ID=64710 PROTO=TCP SPT=41410 DPT=1241 SEQ=1872689688 ACK=0 WINDOW=29200 RES=0x00 SYN URGP=0 OPT (020405B4) MARK=0x80000
Sep 13 08:12:48 kernel: [BLOCKED - INBOUND] IN=ppp0 OUT= MAC= SRC=167.248.133.17 DST=***.**.***.*** LEN=44 TOS=0x00 PREC=0x00 TTL=42 ID=48337 PROTO=TCP SPT=32853 DPT=2080 SEQ=3658807133 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 OPT (020405B4) MARK=0x8000000
Sep 13 08:12:54 kernel: [BLOCKED - INBOUND] IN=ppp0 OUT= MAC= SRC=167.248.133.65 DST=***.**.***.*** LEN=44 TOS=0x00 PREC=0x00 TTL=42 ID=46513 PROTO=TCP SPT=50929 DPT=5698 SEQ=730444207 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 OPT (020405B4) MARK=0x8000000
Sep 13 08:13:55 kernel: [BLOCKED - INBOUND] IN=ppp0 OUT= MAC= SRC=94.102.56.216 DST=***.**.***.*** LEN=57 TOS=0x00 PREC=0x00 TTL=248 ID=54321 PROTO=UDP SPT=37676 DPT=6889 LEN=37 MARK=0x8000000
Sep 13 08:13:56 kernel: [BLOCKED - INBOUND] IN=ppp0 OUT= MAC= SRC=165.22.221.60 DST=***.**.***.*** LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=52605 PROTO=TCP SPT=61953 DPT=8828 SEQ=3381489596 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000
Sep 13 08:14:14 kernel: [BLOCKED - INBOUND] IN=ppp0 OUT= MAC= SRC=120.26.61.117 DST=***.**.***.*** LEN=40 TOS=0x00 PREC=0x00 TTL=235 ID=58070 PROTO=TCP SPT=53341 DPT=2375 SEQ=3834866476 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000
Sep 13 08:14:28 kernel: [BLOCKED - INBOUND] IN=ppp0 OUT= MAC= SRC=184.105.247.198 DST=***.**.***.*** LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=54321 PROTO=TCP SPT=34544 DPT=8443 SEQ=1452232826 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Sep 13 08:14:44 kernel: [BLOCKED - INBOUND] IN=ppp0 OUT= MAC= SRC=192.35.168.103 DST=***.**.***.*** LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=54321 PROTO=TCP SPT=50449 DPT=1911 SEQ=41048384 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Sep 13 08:15:25 kernel: [BLOCKED - INBOUND] IN=ppp0 OUT= MAC= SRC=45.146.165.148 DST=***.**.***.*** LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=12723 PROTO=TCP SPT=42153 DPT=24020 SEQ=3919965402 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000
Sep 13 08:15:56 kernel: [BLOCKED - INBOUND] IN=ppp0 OUT= MAC= SRC=120.26.61.117 DST=***.**.***.*** LEN=40 TOS=0x00 PREC=0x00 TTL=235 ID=27800 PROTO=TCP SPT=53701 DPT=2376 SEQ=2355094893 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000
Sep 13 08:16:05 kernel: [BLOCKED - INBOUND] IN=ppp0 OUT= MAC= SRC=45.146.165.149 DST=***.**.***.*** LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=21124 PROTO=TCP SPT=42105 DPT=24137 SEQ=3626142832 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000
Sep 13 08:16:39 kernel: [BLOCKED - INBOUND] IN=ppp0 OUT= MAC= SRC=192.241.217.50 DST=***.**.***.*** LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=54321 PROTO=TCP SPT=55683 DPT=44818 SEQ=2741207813 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Sep 13 08:16:44 kernel: [BLOCKED - INBOUND] IN=ppp0 OUT= MAC= SRC=88.214.26.53 DST=***.**.***.*** LEN=40 TOS=0x08 PREC=0x20 TTL=244 ID=58132 PROTO=TCP SPT=55435 DPT=18000 SEQ=972826105 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000
Sep 13 08:16:48 kernel: [BLOCKED - INBOUND] IN=ppp0 OUT= MAC= SRC=91.132.58.162 DST=***.**.***.*** LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=60953 PROTO=TCP SPT=49621 DPT=6443 SEQ=2060679055 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000
Sep 13 08:16:53 kernel: [BLOCKED - INBOUND] IN=ppp0 OUT= MAC= SRC=71.6.165.200 DST=***.**.***.*** LEN=44 TOS=0x10 PREC=0x00 TTL=110 ID=59390 PROTO=TCP SPT=23320 DPT=10443 SEQ=2467203155 ACK=0 WINDOW=55185 RES=0x00 SYN URGP=0 OPT (020405B4) MARK=0x800000
Sep 13 08:17:00 kernel: [BLOCKED - INBOUND] IN=ppp0 OUT= MAC= SRC=80.82.77.144 DST=***.**.***.*** LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=54321 PROTO=TCP SPT=41537 DPT=2455 SEQ=4240238915 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000

Maybe he will try to completely uninstall Skynet and see if netflix starts after some time.

 

[pattiri]

If Skynet would block Netflix you would have seen blocked logs in "OUTBOUND" direction; not "INBOUND". Depending on screenshots; there are two possible reasons;

- Your DNS server is can not resolve the addresses . If your are using DOT or etc. try disabling them or try using a different DNS server.

- This is not related with your router. It's your ISP, the link between Netflix and your ISP is probably overutilized.

I'm pretty sure Netflix will work fine if you try to access it via your Cellular line.

If it works OK with Cellular then go back to Wi-Fi and check if it's fixed. if it's fixed the reason is the first one. if it's still slow then the reason is the second one.

Just saw that you've told "Netflix works fine on cellular and other networks" so it's your ISP

 

[Floyd]

@pattiri
Thank you for your answer.
I changed DNS to those from Google. In fact, more icons have started to appear, but the videos will start randomly. Sometimes it will run, sometimes it won't.
Is it possible to view Asus logs to verify why it does not work?

 

[pattiri]

@pattiri
Thank you for your answer.
I changed DNS to those from Google. In fact, more icons have started to appear, but the videos will start randomly. Sometimes it will run, sometimes it won't.
Is it possible to view Asus logs to verify why it does not work?

Welcome.

Are you using Diversion? if yes you can follow dnsmasq.log under Diversion menu by pressing f -> 5 and the IP address of your PC or phone.

While following this log, try to access Netflix with your phone of PC (the owner of the IP address you've filtered earlier) and search for something unusual. Sometimes, I'm having similar DNS problems, for example, when I start IMDB app or something else on my phone and nothing loads, when I check dnsmasq log having this issue most of the time I saw "reply error is SERVFAIL" logs. Here what does it means. (check this for other codes; https://bluecatnetworks.com/blog/the-top-four-dns-response-codes-and-what-they-mean/)

I've managed to solve most of these errors by using multiple DNS servers. Currently I'm using as below. Depending on my experiences, enabling DNSSEC Support can also cause this type of issues that's why I've disabled it. (or DNSSEC is just a coincidence I'm not sure about)

These are the troubleshooting steps that I can advise.

BUT you've told "videos will start randomly". Rarely I also have this issue with youtube, I can play some videos at 4K with no problem but some of them can't play even at 144p. After a couple of minutes and refreshing page or restarting the video it resolves.

To sum up, according to me your problem isn't caused by you or your router. For some videos you access to the Netflix server in (let's say) Germany and for others you access the Netflix server in France or somewhere else. The bandwidth is OK with the server in Germany so you play the video with no problem, but the bandwidth between the server in France is not OK so video can't even start.

It may be more complex but this is the most basic explanation of your problem. That's why my recommendation is to get in touch with your ISP. They need to go deeper to find out this problem with an experienced Network engineer. A call center member probably won't see any problem about your connection so try to push them to escalate this issue to higher level support.

one last thing; this may also resolves by itself in a couple of days If you ask how, let's say when you have no issue with Netflix the path between you and Netflix was A-B-C-D-E and because of a issue on C or something else this changed as A-B-F-D-E and F can't handle this traffic. Eventually your ISP will fix the problem with C and when C gets back in action you'll have no problem.

I hope this explains all