Community Forum

Xfinity Gateway

bdw0758
New Poster

Xfinity Gateway

I'm having trouble with certain websites being blocked by the Xfinity Gateway. The problem happens on any device, but I will describe it for my iPhone using "wingenious.net" as an example. If I turn my iPhone's Wi-Fi off and access "wingenious.net" using cellular data it works just fine. If I turn Wi-Fi back on, connect to the Xfinity Gateway, and access "wingenious.net" it simply spins and goes nowhere. The same thing is true for some other websites. I know these websites are using domain forwarding with GoDaddy, but (again) it works just fine if I go around the Xfinity Gateway. Why is the Xfinity Gateway blocking these websites?

EG
Expert

Re: Xfinity Gateway

Try disabling the Xfi Advanced Security feature as a work-around for now and see. It's buggy ! And there is currently no way for an end-user to be able to whitelist anything;


To disable the Advanced Security feature in xFi, select the Account icon from the top-left corner of the Overview tab on the xFi app and then select xFi Advanced Security. From here, select Disable under xFi Advanced Security and follow the on-screen prompts.


https://www.xfinity.com/support/articles/xfinity-xfi-faqs



I am not a Comcast Employee.
I am a Customer Expert volunteering my time to help other customers here in the Forums.
We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Mark the post as Best Answer!
bdw0758
New Poster

Re: Xfinity Gateway

Thanks for the suggestion!

 

I had already disabled Advanced Security, but it did not make any difference.

 

I presume it would not have made any difference for the Wi-Fi connection directly to the Xfinity Gateway, but I also tried putting my home router into a DMZ on the Xfinity Gateway, but that did not work either.

 

EG
Expert

Re: Xfinity Gateway

It may not be the gateway device that's doing the blocking. It may be that your Comcast public IP address is being blocked by various websites for some reason.

 

Perhaps the output of traceroutes to the sites that you can't reach will reveal a clue about where the blockages are occuring.



I am not a Comcast Employee.
I am a Customer Expert volunteering my time to help other customers here in the Forums.
We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Mark the post as Best Answer!
bdw0758
New Poster

Re: Xfinity Gateway

Do these provide any clues?...

 

Tracing route to wingenious.net [184.168.131.241]
over a maximum of 30 hops:

1 <1 ms <1 ms <1 ms 192.168.1.1
2 2 ms 1 ms 1 ms Docsis-Gateway.hsd1.mn.comcast.net [10.0.0.1]
3 22 ms 29 ms 19 ms 96.120.48.229
4 13 ms 32 ms 21 ms po-301-1204-rur02.newport.mn.minn.comcast.net [68.87.179.253]
5 14 ms 13 ms 11 ms be-15-ar01.roseville.mn.minn.comcast.net [162.151.54.101]
6 20 ms 13 ms 14 ms ae-12.bar4.Minneapolis2.Level3.net [4.68.39.97]
7 * * * Request timed out.
8 65 ms 63 ms 61 ms ae6.ibrma1205-02.phx3.bb.godaddy.com [4.16.137.146]
9 * * * Request timed out.
10 72 ms 61 ms 68 ms 148.72.32.5
11 63 ms 62 ms 59 ms ip-184-168-0-113.ip.secureserver.net [184.168.0.113]
12 58 ms 60 ms 61 ms ip-184-168-1-134.ip.secureserver.net [184.168.1.134]
13 61 ms 60 ms 63 ms ip-184-168-131-241.ip.secureserver.net [184.168.131.241]
14 60 ms 61 ms 60 ms ip-184-168-131-241.ip.secureserver.net [184.168.131.241]

 

Tracing route to petersonlumber.com [184.168.131.241]
over a maximum of 30 hops:

1 <1 ms <1 ms <1 ms 192.168.1.1
2 1 ms 2 ms 1 ms Docsis-Gateway.hsd1.mn.comcast.net [10.0.0.1]
3 11 ms 11 ms 18 ms 96.120.48.229
4 9 ms 9 ms 9 ms po-301-1204-rur02.newport.mn.minn.comcast.net [68.87.179.253]
5 14 ms 12 ms 13 ms be-15-ar01.roseville.mn.minn.comcast.net [162.151.54.101]
6 14 ms 21 ms 15 ms ae-12.bar4.Minneapolis2.Level3.net [4.68.39.97]
7 * * * Request timed out.
8 61 ms 62 ms 65 ms ae6.ibrma1205-02.phx3.bb.godaddy.com [4.16.137.146]
9 * * * Request timed out.
10 62 ms 62 ms 60 ms 148.72.32.5
11 61 ms 60 ms 61 ms ip-184-168-0-113.ip.secureserver.net [184.168.0.113]
12 60 ms 61 ms 60 ms ip-184-168-1-134.ip.secureserver.net [184.168.1.134]
13 59 ms 61 ms 60 ms ip-184-168-131-241.ip.secureserver.net [184.168.131.241]
14 61 ms 62 ms 65 ms ip-184-168-131-241.ip.secureserver.net [184.168.131.241]

 

EG
Expert

Re: Xfinity Gateway

Unfortunately not. They both completed to the destination servers / web hosts. It may be something internal at the host. You may want to contact them about this. Good luck.



I am not a Comcast Employee.
I am a Customer Expert volunteering my time to help other customers here in the Forums.
We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Mark the post as Best Answer!
bdw0758
New Poster

Re: Xfinity Gateway

Thanks for your efforts.

 

It seems unlikely the problem is the web hosting facility (GoDaddy) by themselves. The websites work fine if I avoid the Comcast network. Other websites, including others hosted by GoDaddy, also work fine. The problem appears to involve both parties, maybe.

 

The domains hosted and forwarded by GoDaddy do not pass through the Comcast network. They pass through the T-Mobile network without any issues, but not Comcast. I' m probably not going to get anywhere with either party individually, but the odds of getting them to work together and figure it out are somewhere between infinitesimal and zero.

EG
Expert

Re: Xfinity Gateway

Ha ! We've seen many many posts here in the past about Comcast public IP addresses being blocked by GoDaddy !! Your traces show that you are indeed traversing the Comcast network.



I am not a Comcast Employee.
I am a Customer Expert volunteering my time to help other customers here in the Forums.
We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Mark the post as Best Answer!
bdw0758
New Poster

Re: Xfinity Gateway

OK, but again, my Comcast public IP address works just fine for other websites hosted by GoDaddy. They would have to be blocking it for ONLY those domains that are forwarded, which would not make much sense.

wingenious.com - hosted by GoDaddy - works fine

wingenious.net - hosted by GoDaddy - forwarded to wingenious.com - does not work

If GoDaddy were blocking my Comcast public IP address then both should fail.

EG
Expert

Re: Xfinity Gateway

There is selective internal blocking for blacklisted IP's. We can speculate this till the cows come home. Contact them or not, it's up to you. There is no evidence that Comcast is blocking. You'll get no results from them. Good luck.


I am not a Comcast Employee.
I am a Customer Expert volunteering my time to help other customers here in the Forums.
We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Mark the post as Best Answer!