I have a server running with network traffic routed via a wireguard VPN. This morning I had a few instances of an alarm tripping noting that the VPN disconnected and reconnected, but it seemed to have righted itself after a few hours. The kill switch was engaged so it was no big deal. I tried to access via teamviewer - the machine showed online - but it ultimately wouldn’t connect. I remoted in from another machine on the network and verified that the machine was accessible locally. I also verified in Firewalla that the site flow was being blocked, but the diagnosis didn’t point back to any rules.
I created a rule to always allow the teamviewer.com domain to access that machine. Now attempts to access via Teamviewer are blocked, but it references my rule to always allow traffic to teamviewer.com as the reason for blocking the flow.
Any ideas?