Netflix still blocks me with connection over wireguard reddit / selfhosted ---------------------------------------------------------------------- mr_abradolf_lincler · 2023-10-14 20:54 Hey Guys, I have a second place where I am staying quite often and where I got blocked from Netflix. I run a homeserver with wireguard in my main appartement, so no problemo I thought to myself...Created a new config in wg-easy, installed wireguard on my Android TV in the second appartement and tested the config. Everything seems to be working fine: All traffic from the TV seems to get routed through my homelab (I can see the usage data in wg-easy). I still get blocked from netflix. Deleting all local files and cache in androidTV doesen help. When I check for ipv4 and ipv6 I see the IPv4 addresse from my first appartement but no ipv6 addresse is being detected. I allowed all ipv6 addresses in the wireguard config tho. Why is Netflix still blocking me, how can this be? Appreciate every help, thanks a lot in advance! ---------------------------------------------------------------------- EndlessHiway · 2023-10-14 20:57 They seem to block a lot of VPN connections or maybe they think you are password sharing. ---------------------------------------------------------------------- ElevenNotes · 2023-10-14 21:06 There is a simple solution: 🏴‍☠️ ---------------------------------------------------------------------- Badger_7 · 2023-10-14 21:14 Check for DNS lookups from your AndroidTV at the router. When Germany didn’t have Disney+, I used a US-based VPN tunnel through a raspberry pi with DNS supposed to go over the tunnel, and was still getting blocked. Checked traffic logs and saw the AppleTV doing DNS around the tunnel, through my main router. Blocked all outbound DNS from my AppleTV at my main router, and was able to stream. Regional DNS can give it away ---------------------------------------------------------------------- Original-Ad5431 · 2023-10-14 21:15 I set up a wireguard server today to do the same... I will keep in touch to see it worked for me 😁 ---------------------------------------------------------------------- Itzz-Donkey · 2023-10-14 21:16 Also plex or jellyfin ---------------------------------------------------------------------- LavaCreeperBOSSB · 2023-10-14 21:19 I personally used Tailscale for my sister to be able to access Netflix 300 miles away, worked like a charm ---------------------------------------------------------------------- joecool42069 · 2023-10-14 21:30 They block known VPN public ip addresses. OP is VPNing to home, point to point. If he’s doing it right they wouldn’t know. ---------------------------------------------------------------------- mr_abradolf_lincler · 2023-10-14 21:33 I get it and I agree! But I really want to know why my use case doesnt work. As far as I understood vpns it really should Work... ---------------------------------------------------------------------- mr_abradolf_lincler · 2023-10-14 21:34 The VPN runs on my own locally selfhosted server which is not blacklisted. ---------------------------------------------------------------------- mr_abradolf_lincler · 2023-10-14 21:35 Nice, thanks:-) ---------------------------------------------------------------------- mr_abradolf_lincler · 2023-10-14 21:39 Tailscale runs on wireguard as I understood it so I guess I will be having the same problem with tailscale I think. ---------------------------------------------------------------------- ElevenNotes · 2023-10-14 21:40 No. Netflix can block any IP for any reason. If your VPN providers IPs are known Netflix simply blocks them. ---------------------------------------------------------------------- mr_abradolf_lincler · 2023-10-14 21:42 Yes but I run wireguard locally on my selfhosted server. I am my own vpn provider:-D ---------------------------------------------------------------------- boli99 · 2023-10-14 21:44 ways that netflix can work out where you are: - WIFI network name , in conjunction with... - MAC of wifi AP connected to by the device - clock time of device - DNS query results, i.e. where they come from will vary depending on where you are geographically - DNS leaks (continuing using non-vpn'd dns servers even after connecting the vpn) - latency between you and netflix - spotting the device shifting geographical location in seconds (you cant fly from Africa to USA in 30 seconds, for example) - having other devices logged into same netflix account, but not same geographical location as the vpn'd device - historical location data - and others too some of these things will happen BEFORE you start the Netflix app (i.e. background services...) so, its entirely possible that your Netflix app worked out where you were before you started it or you've got a leak or its just guessing, because you've got 3 phones connected from country A, but a vpn'd device disappeared from country A and appeared in country B 30 seconds later. ---------------------------------------------------------------------- brianly · 2023-10-14 21:47 You don’t seem to have said much about your configuration to be honest. I saw someone ask about DNS lookups yet you are blaming wireguard. Wireguard or OpenVPN or any other VPN shouldn’t be a problem as long as something in your overall config isn’t giving away conflicting information that the service can use to disqualify access. ---------------------------------------------------------------------- ElevenNotes · 2023-10-14 21:48 Whoops I missread that sorry. Then your DNS is probably not going through the VPN and your client is requesting other Netflix servers. Make sure all traffic, including DNS, goes via the tunnel from the VPN client. ---------------------------------------------------------------------- popnfrresh · 2023-10-14 21:53 Make sure split horizon is turned off for that vlan. ---------------------------------------------------------------------- mr_abradolf_lincler · 2023-10-14 21:55 That makes sense. But as I understood, AndroidTV should automatically use my Networks DNS settings when connected to the Network via the Android TV wireguard App. I could manually Change the DNS settings in androidTV tho. Gonna play with that setting tomorrow anyway. Thanks :-) ---------------------------------------------------------------------- ElevenNotes · 2023-10-14 21:56 Wireguard client config has a setting to set the DNS server. ---------------------------------------------------------------------- feedmytv · 2023-10-14 22:12 alot of google product dgaf about your dns servers and goto [8.8.8.8](https://8.8.8.8) regardless. you can dnat towards your forwarder on your router ---------------------------------------------------------------------- acook8 · 2023-10-14 22:22 Did you just install tailscale on the devices that use Netflix, or did you have to do anymore setup? ---------------------------------------------------------------------- bailey25u · 2023-10-14 22:38 I like how people resorted to network engineering to fight netflix ---------------------------------------------------------------------- 12_nick_12 · 2023-10-14 23:03 And I hate to say it, but Emby is pretty awesome as well. ---------------------------------------------------------------------- LavaCreeperBOSSB · 2023-10-14 23:11 Installed on an always on PC, setup as Exit node Installed on her Mac, set it up to use the pc as exit node She turns it on when she needs it and turns on the other vpn when she needs to pirate 😁😁 ---------------------------------------------------------------------- fargenable · 2023-10-14 23:50 Probably leaking IPv6. When connected to Wireguard. Rub host fast.com and provide the ip address that is resolved. ---------------------------------------------------------------------- StillParticular5602 · 2023-10-15 00:22 You need to block (create a firewall rule) all outgoing DNS from the device you are streaming Netflix from and force it through the Wireguard Tunnel. Most of these "TV" devices have DNS hard coded to ensure they can still work if the local network DNS is crap. ---------------------------------------------------------------------- hucknz · 2023-10-15 00:38 This is the way. Netflix has Google DNS hardcoded in their apps, it only falls back to local DNS if it’s unable to reach Google. ---------------------------------------------------------------------- _____root_____ · 2023-10-15 02:42 Can you provide more details for doing this? Bypassing hardcoded DNS in general? ---------------------------------------------------------------------- CalderaCollapse · 2023-10-15 02:49 I use a static route. You can Google something like, "block Google DNS" and find results like this, https://support.strongvpn.com/hc/en- us/articles/360046949754-Blocking-Google-DNS ---------------------------------------------------------------------- RapidwebNZ · 2023-10-15 02:59 Sounds like the device at the second location might be connecting directly to Netflix, perhaps via IPv6 if your wireguard config isint tunnelling IPv6 also. As others have mentioned, this is not a Wireguard issue at all, likely just config / deployment ---------------------------------------------------------------------- [deleted] · 2023-10-15 03:40 [deleted] ---------------------------------------------------------------------- selfhosted-ModTeam · 2023-10-15 03:54 This post is being removed due to the subject not being related to the "selfhosted" theme of the community. Please message the mods if you have any questions or believe this removal has been in error.