I just switch from Unifi to Maxis Fibre. After setting up my own router (ASUS AC-5300), I notice some sites are are inaccessible even though I have configured to use custom DNS (Cloudflare, Google). However, pinging via terminal show successful pings. Previously I can access the sites in Unifi. Thank you in advance~

NSFW site

Use Cloudflare 1.1.1.1 app for Windows, Android, etc.

Using VPN is indeed the last resort option. But it will throttle the speed.

I am more curious of what's happening here. I cannot access the site, but ping can.

Cloudflare 1.1.1.1 is not a VPN. It is a DNS tool.

Are you browsing on pc?. If yes, you could try editing the hosts file on C:\Windows\System32\drivers\etc . Open the hosts file using notepad and paste these line below.

66.254.114.40 www.pornhub.com
66.254.114.40 pornhub.com

Then, disable and re-enable your network interface or restart your computer

I wonder if changing the DNS for IPV6 as well might help?

Oh sorry I mistaken with their WARP service. I have tried 1.1.1.1 in my phone and it works. However, is there any other way other than using 1.1.1.1 app?

If you using Android phone that is using Android 9 and above you can set Private DNS.

1.Go to Settings > Network & internet.
2.Select Advanced > Private DNS.
3.Select the Private DNS provider hostname option.
4.Enter one.one.one.one or 1dot1dot1dot1.cloudflare-dns.com and press Save

Did TS set IPv6 DNS also?
Need to set IPv6 DNS as well

This post has been edited by michaelkkl: Mar 17 2022, 07:29 PM

Maxis is better at blocking sites compare to Unifi. Just use the 1.1.1.1 app or VPN.

Me too. Using maxis fibre. Nsfw websites are blocked even with dns changed.

some isp blocks certain major sites at IP level. DNS changes could only do so much.

VPN is your only option, tried all the methods mentioned on top

1.1.1.1 is kinda vpnish la. It is like other vpn should work. But the editting of host files should be possible also if Maxis block the IP of the website but there mirror ip that it did't block. But u can just type the alternative IP directly to address and test if it work before editting the host file. Even better u just bookmark the alternative IP

I have disabled IPv6 as my friend said Maxis got slow or something if using IPv6.

I have tried this and it seems it only works if using mobile data. CMIIW.

As with my first post, the IP address is ping-able. But if try to access its domain, it will show "ERR_CONNECTION_RESET".

I guess as QuantumEdge said, VPN is the only option. At least, we know that Maxis is not as dumb as Unifi

if you can ping, try just entering the IP into the browser rather than accessing via its domain

it has Layer 7 Firewall, even with HTTPS, SSL SNI (Server Name Indication) Header are not encrypted!

Connection is terminated when blacklist SNI is found...


with TIME


test via HAProxy (any -> TIME -> server)


I can confirmed ISP has Layer 7 Firewall, blocking using SSL SNI

website need using E-SNI to by pass Layer 7 Firewall

well too bad it din take off. ESNi need browser and the website support also. only firefox support it cuz they collaborate wtih cloudflare for this standard

It is not suggested to disable IPv6 as it will cause performance issue.
Kindly enable your IPv6 for better performance.

The only ISP that's having a problem with IPV6 is Unifi, Maxis is perfectly fine
Yeah, just kind of annoying when you are getting a bit h*rney in the night...