How To Fix Verizon FiOS Internet Service When All HTTP Traffic Is Blocked

QA rule zero: whatever changed last caused the problem.

At 6:00 am, my wife woke me up to inform me that she could not access her Gmail. Ironically, I switched my parents, kids, wife, and office to Gmail in part to minimize tech support calls. And even though it’s a holiday (MLK Day), tech support takes no holiday.

Here is the Verizon FiOS Internet error message (click to enlarge):


And, for those trying to Google this problem (presumably from a non-FiOS network), here is the text of the above error message:


Access Blocked: Your attempted access to URL was blocked (Keyword Filter). Contact your network administrator for help.

As error messages go, this one is pretty good. We have the URL starting in, which is the IP address of the Verizon FiOS router (an Actiontec MI424WR in my case). And we know that a “Keyword Filter” is causing Google to be blocked.

In an earlier life, I did quality assurance (QA) on both hardware and software (at BBN, if you’re curious). Whenever the hardware engineers changed the hardware and broke the system, they suspected bad software. Whenever the the software engineers changed the software and broke the system, they suspected bad hardware. I learned if you broke a system that was working before you touched it, then whatever you changed last is what caused the system to break. Software engineers broke software, hardware engineers broke hardware.

Other good practice that I learned from working in QA:

  1. Take good notes.
  2. Figure out what works.
  3. Figure out what doesn’t work.
  4. Make an educated guess about what is causing the difference between what works and what does not.
  5. Test each possible cause one at a time. Do not test more than one variable at at time.
  6. Lather, rinse, repeat.
  7. Take good notes.

I tested other TCP/IP applications. I was able to VNC over SSH into my work computer. Therefore, the Internet connection was working.

I was able to access Gmail via a secure connection (e.g. and was able to access other websites via HTTPS but not via HTTP. The HTTP protocol runs on port 80, the HTTPS runs on port 443. (See the IANA well known ports and registered ports list for details.) I have heard of ISPs blocking inbound access to port 80 to discourage home users from running web servers, but I have never heard of blocking outbound HTTP traffic.

Here I cheat a little. I recognized the error message as being from the Actiontec router’s built-in “parental control” software from the 30-day free trial I received in the fall of 2006. But I’m getting ahead of myself.

To login to the router, point your browser to and enter the default username (admin) and the default password (password1). If your Verizon FiOS installer gave you different login credentials, then use those. I had to ask the installer for this info. And although you can customize the router, Verizon will reset it to factor defaults if they have to make a service call.

I navigated to the Parental Control page and tried to create a new rule. Sometimes broken software behaves like broken hardware: all you need to do is turn it on, turn it off, and then it works. But in this case, I could not delete the test rule that I created. Nor could I edit it. The router kept hanging whenever I tried to do so. I did notice that the SurfControl icon that had appeared on the Parental Control page was no longer there. In the fall of 2006 (when I first got FiOS), you got a free trial of SurfControl and then had to pay to keep SurfControl active. Perhaps Verizon struck a deal with SurfControl to provide filtering software for free. Perhaps the deal with SurfControl has been terminated.

QA rule zero: whatever you changed last is what caused the system to break.

I had changed nothing on any computer from the time Gmail last worked until Verizon inexplicably started blocking it (and the rest of my web traffic). So I assume that Verizon changed something that broke my router. Perhaps they were pushing a software update out their FiOS customers. Perhaps a software update related to the SurfControl parental filtering software. When I worked at Verio, we often updated the network over holiday weekends. Then again, we also told our customers what we were doing. And if you called Verio, they had a clue about any problems you discovered. Not so with Verizon.

Keep in mind what I know:

  1. HTTP (port 80) traffic is blocked.
  2. HTTPS (port 443) traffic is not blocked.
  3. Other TCP/IP traffic is not blocked.
  4. Parental filtering software is acting flakey.
  5. I have changed no hardware and no software since everything was last working.

Here’s how my call to Verizon “tech support” went:

ME: My wife logged on this morning and was unable to access Gmail.

VERIZON: What browser did you use?

ME: Firefox. (Note to self: always answer “Internet Explorer” when asked this question.)

VERIZON: Try it with IE now.

ME: OK [said he, trying not to act like he knows infinitely more than the tech support drone]. Nope, still doesn’t work.

VERIZON: Can you access the Internet at all?

ME: I can access Gmail securely via HTTPS but not via HTTP.

VERIZON: That’s a Gmail problem. You’re going to have to contact them for help.

ME: No, no, no. This happens with any website. Even with The URL of the error message starts with

VERIZON: That’s not our network.

ME: What? Of course this is your network. This is a VERIZON error message from the Actiontec FiOS router that VERIZON installed. Something is wrong with your router.

VERIZON: That’s not our network. You’re going to have to bypass the router to test the Internet connection.

ME: I already told you that the Internet connection is working. Only certain protocols are being blocked.

VERIZON: We’re not blocking anything.

ME: You are not listening. I’m going to take the phone and bang it on the desk now. [Takes phone off of ear, bangs it on desk, resumes talking.] The Internet is working. I have a separate window open on a secure connection to my office network.

VERIZON: Do you mean you have a VPN?

ME: Well, sort of. It’s a software VPN, VNC over SSH.

VERIZON: That’s an unsupported network configuration. We don’t support VPNs!

ME: What? No! That’s got nothing to do with it. The filtering software on the router is broken. Do you even understand how the Internet works?

And then the Verizon tech support drone hung up on me. Maybe I was being overly optimistic in thinking that I could get an intelligent answer out of Verizon. Maybe I shouldn’t have mentioned the magic bad words “VPN” or “blocking” which caused the tech support drone to read another scripted response. One thing was clear. Verizon was completely clueless.

I suspect that Verizon pushed a software update out to my router last night, that the software update had to do with the parental control software provided by SurfControl, that the software update had a bug, and that the result was the parental control software blocked all outbound web traffic. I doubt I’m wrong.

So here’s the solution. Login to your router. If you have customized any settings, then print out those pages (or save them as PDFs). Go to the Advanced page and select “Restore Defaults.” The router will give you a chance to save your config file. Save it. It’s a plain text file and it’s full of good info. Then restore any custom configurations you’ve made. And this will fix the problem.

Happy holidays.

See also:

31 thoughts on “How To Fix Verizon FiOS Internet Service When All HTTP Traffic Is Blocked”

  1. Mr. Heels, Your advice was very timely, I had the same issue today. Tried digging around to see if Verizon had installed some new service on my main machine.

    Interestingly, this did not effect my wireless connections to the router.

    Thank you for the posting.

    J. Hale

  2. classic… i got a good laugh @ the tech support call… i’ve talked to the “Try it with IE” guy on numerous occasions, and not once has it solved the problem.. why do they always assume it’s a browser problem and that Internet Explo(it||r)er will magically fix all your problems.

    btw, Erik, Thanks for a great blog, and great information here-in. It’s great, and greatly appreciated!

  3. Well, it is not the ISPs job to make sure your custom browser works which I’m sure is why he had you use IE. Just so you know….routers can break and deny you internet access on certain ports for NO REASON AT ALL. This is not the fault of the ISP. The fact that you reset defaults on the router and that resolved it shows you it wasn’t necessarily something the ISP did. Keep in mind MOST isps dont just push updates to routers. “Why” you ask? What would be the point of doing that? I have done tech support for 2 ISPs and I can safely tell you this is not a common practice.

    Customer logic – I’ve been having problem ‘A’ since doing ‘B’ so ‘B’ MUST be the cause.

    This just isn’t always true.

  4. Austin you must work for an isp hence your lame response.

    Since the ISP requires this device makes it an extension of their network and and therefore is their fault. This router has serious problems.

    Also your logic about his configurations is moot. I have the same issue. The router constantly stops working. If I restart it. Then it will work again. If I reset the settings then it will work again. If I reload all my configs it will still work. Then poof. It starts acting up again. This is not a solid device. End of story. Its barely a decent device.

  5. I have a different question. Has anyone ever been kicked off the internet while composing a message? I have seen this happen to my aunt’s computer several times.

  6. Greetings Mike,

    Sure, any router in addtion to the Verizon router. But you can’t unplug the FiOS router that Verizon installs. You can install a second router on top of that, which I do. The Verizon FiOS router (an Actiontec model, in my case) does both broadband (cable TV stuff) and RJ45 (Internet stuff). Plus WiFi (which I don’t use). There’s also a special box for terminating the fiber and splitting into into broadband (cable, Internet) and phone (RJ11) connections. And a battery backup for the phone system. A lot of new hardware in my electrical closet. I had my electrician install a new outlet next to the electrical panel to accommodate all the new hardware.


  7. wow i got fios 50/20 and the actiontec and i can tell you that you can use any router you want to with fios. the actiontec sucks really bad the only thing you need it for is the tv guild plus the nat table is only 1kb

  8. Erik,
    I’d very much like to email you personally regarding this post. Very interesting, some similarities to my own situation…..would like to chat.

  9. Master Kuro,

    Do you speak English? Because honestly, you have no clue how to create a sentence that one can understand.


    Nice info. Verizon seems to be learning from their experiences. Unfortunately, just not fast enough. I, like you just have to remember that this FiOS is still new.


  10. Hi, i came across your post today while looking for some sort of help for this Crap they Call FIOS..i am very displeased with it, we have had it now 6 months and i have talked to the Drones at least 3 times a month with issues..Finally had to have one computer serviced because of a Virus from VERIZON thanks guys! now our Main PC in in the shop for the same reason…I can not get any help, My pc locks up on web sites, the screen turns off and then comes back on and NO help from them at all…I can;t wait until my stinkin Contract is up so i can get rid of the GARBAGE!!

  11. AJ you didn’t get the virus from Verizon, you got it because your pc wasn’t protected in some way. Verizon doesn’t guarantee not getting a virus’ even if you get the protection suite from them, noone can. PC software issues aren’t a Verizon issue or any isp for that matter .
    I worked at Verizon, I was a drone for over 2 years so I know well about routers being updated and not being told. Feel free to email me any questions and Erik if you get a Motorola NIM on Ebay you can use any router with FIOS plus a little adjustment of settings in the router to redirect traffic to the set top boxes so u get a guide.

  12. I learned long ago that, when calling the drones, just answer their questions with the “right” answer (even if it is not applicable to your problem). The sooner you do, especially when you have an actually advanced issue, the sooner you will get pushed up the Level 2 support (or 3 if you are already there). The hole time make this dude your buddy. The biggest hump though is Level 1 to Level 2, especially if you are a network guru. I find it funny that, no matter what company I call, Level 1 support DOES NOT LIKE TO ESCALATE. However, if he’s your buddy, he’s probably going to be a bit more willing to work with you. So many people just lose their cool and become frustrated with the person and that’s why so many people get “accidentally” disconnected. Have you ever worked at a job that required no real thought and hated every minute of it? These people are you when you were i that position. Remember that and keep your cool :)

    Tips for talking to Level 1 support:

    #1 (and most important) Ask for their employee ID number and extension. If they give you some bs about not giving that information out, immediately move up the ladder to their supervisor (and further if necessary) until you have an ID of the person. Each time you are “transferred” to a new person repeat this step so you have a chain of events should you need to talk to a real supervisor or make a complaint to the company.

    #2, if you get far enough to be escalated, do not get off the phone until you have an internal trouble ticket number to refer to. Don’t buy in on the “its on your account” stuff. Things get “lost”.

    #3, If you can, find out the number and/or extension of the department your ticket was generate for so you don’t have to go through level 1 hell again.

    #4, get a callback time line and callback immediately after you’ve breached the first interval. If they say 24 – 48 hours, call after 24, not 48.

    #5, if no progress is being made, call the corporate number for the company and ask to talk to the department head of “X” department where your stuff was handled. You might have to wait a long time for this person to be available, but it will be worth it.

    #6, if all else fails, please be sure to file a BBB complaint. If applicable, file a complaint with a US regulatory service (like the FCC for Verison). If it’s an emailed complaint, CC the company CEO, department head you tried to talk to, all of your friends and family, your Fed, State, and local representatives, EVERYONE. Corporations think they can cut costs and put in drones, hence the state that we are in today. The only way to fix that is for people to stop bitching, demand action, and ACT on those demands in any way they can.

  13. Thanks, had the same problem started today. Same router and same issues. Thank god Google indexes your page pretty quick so I found it near the top of the search list.

    Thanks dude.

  14. Thank you very much Erik for the solution. I received the same error message on my computer and didn’t even bother calling customer support but instead went on another computer which was directly connected to the router and had internet connection. I really don’t know anything about routers and computers but your solution was easy to follow and solved my problem! :)

  15. I started my career on a level 1 helpdesk (aka hell), here are a few observations.

    Rule #1: NEVER, NEVER, NEVER talk “tech” to a level 1 helpdesk.
    Rule #2: Level 1 helpdesks are designed to *handle call volumes* NOT to *resolve problems*.
    Rule #3: Level 1 helpdesk pay as well as McDonald’s. The only difference is that the helpdesk people can type a little. The ones that can *actually think* are either quickly promoted or leave for a “real tech job.”

    Most tier1 reps are rated on the number of “completed” calls. They are given 10 minutes training and handed a script of things to try. If you mention ANYTHING that is not on the list they will log the call as “completed:unsupported” and hang up.

    Here are some simple level 1 helpdesk tips:
    – It is not the rep’s fault he is under trained.
    – Use 6th grade words.
    – Get an incident number.
    – Use “common” tech words i.e.:
    “web page” not “port 80”
    “secure web page” not “port 443”
    ping and traceroute are (mostly) ok.
    – If asked about software ALWAYS say “XP” and IE”
    – NEVER mention “exotic” apps and files like “MP3”, “VNC”, “Notepad” or “command prompt”.
    – If they are not heading in the right direction, suggest that you may need a “level 2” rep to resolve the problem. (many places “ding” them for escalations.)
    – If the problem is not resolved, request an escalation.
    – If the rep hangs up, call back and ask for a manager. Give them the incident number and request the the call be handled by a tier 2 rep that can do more than read a script.
    – If they refuse, do a little digging and find the area sales manager’s phone number and give him a call.
    – If all the above fails, post everything you have done in a public forum (like this) and take your business to a company that gives a *&^%$.

  16. This is some frightening stuff. I have been considering ordering Verizon FIOS for the house we are moving into next week.

    Question: It would be a dealbreaker if they prevent you from connecting to your own box over http and ssh from outside. Do they?

    Yes I realize it’s dynamic IP and that’s not a problem thanks to et al. Right now we have Comcast and I can log onto my machine as long as it’s on.

  17. Issue: Hello all, first of all I’m a fios tech guy
    And I’m sorry for hearing the troubles you have had with the service. I confess that Verizon uses contractors and outsource some of the calls to India…so I can agree with you that some reps are not up to par. I have been on the fios project for 4 years now and we actually don’t have tier 1, 2 or 3
    Most of the reps that are real Verizon fios employees are well verse in computer networking and what have you …also most of us make over 50,000 a year….so no drone
    Please feel free to e-mail me your thoughts

  18. ok so heres the deal im a tier one fios “drone” some agents stick to the script i dont i deal with the problem and get off the phone i am part of the subcontracted jobs out as i do everything and have access to everything a verizon guy does but i work for a contractor company and dont make great money about half what i would if i worked at verizon itself…so heres some tips and suggestions that may help you as if you called into me and most of my fellow agents, 1. if your good to me ill be good to you, if your a dick to me ill be one right back to you and prolly just end up hanging up and either a. fucking up your account and your service…I CAN DO THAT YA KNOW…or just not calling you back everything is recorded but if you worked there long enough and know the ropes you can do whatever you want and not get into trouble, 2. if you get a virus or you dont change the batteries in your remote and your fatass is to lazy to figure out how to program the remote dont blame verizon, 3. the service itself is rocksolid just some of the equipment is shitty esp. the motorola stbs. with them being as complex as they are esp the dvrs like me being able to deactivate and reactivate them and reload them and everything more electronics = more shit breaking like on a car, the routers are also made by the lowest bidder but are actually not that bad, over 90 percent of the calls ive taken is just b/c of stupid people that have no business of owning a tv or a computer for that matter. 4. verizon techs that come to your home are very good at what they do, however they rarely show up on time for repairs or installs and make sure if they do show up they check everything that it works before they leave, verizons deal is pretty simple if its our shit that breaks we fix it or replace it for free if its your shit its gonna cost you prolly out the ass avg about 91 bucks if they roll a truck at a minimun, and no we wont dispatch out for your dumb shit like hooking up your boxes and dvd players to your tv get off your fatass and look at the directions or google it if your still not sure and if after all that you still dont know it do yourself a favor and take your tv and computer out to your front yard dump a bunch of gas over it and burn it all to the fucking ground, you dont need the shit if you dont have a clue to use it get one of those jitterbug cell phones and leave the rest of us alone stop wasting your time and mine. so i believe that concludes my rant for the most part lol so in short the fios service itself is good some of the equipment is shity but hey its still pretty new so youll have that and most of the computer and cant connect errors are stupid people cause, and the golden rule treat those like you wish to be treated esp if those above you have the power to turn off all your shit at the click of a mouse. lol oh and one more thing verizon has a different dept for everything and i mean EVERYTHING!!!! so dont call tech support because you didnt pay your bill you worthless fuck we CANT access your bill and its not our fault your pathetic fatass didnt pay it and when you do pay it it can take as much as 24 hours for all 3 services to come back up just like your bank. we dont have fios in the state i live in but we do have a fsc here to figure…but anyways i cant wait to get fios but im getting the internet and tv only copper wire phone is still way more dependable that fios phone happy hacking!!!

  19. Had this happen to me, literally, just a few moments ago.
    Is there any way to reset the settings of the router without having to log in? Would it work if you just did a hard reset as well?

  20. How many of you disgrunted have ADT???The way Veriaon patched in to the board makes alot of difference. I’ve found that the ADT board actually needs as filter, but its different from the standard DSL phone connect filter. They can be purchased online through normal means for ~$20. Z-A431PJ31X (Excelsus is most promrnant return)
    Just google it….

  21. You don’t need to use the Actiontec router with FOIS. I have FIOS and I use a D-Link. I don’t even own an Actiontec as I got FIOS before they started using that brand. In fact, you don’t even need to use a router at all with FOIS. You can plug directly into the ONT with a laptop. In fact, I’ve done just that to troubleshoot problems before. It’s your network from the ONT onward. So the tech was correct about the problem being on your end — not theirs. THe very fact that you reset the rounter and that fixed your problem proved that.

  22. I hope someone can help me with the following problem: There is a seminar I access through teamtalk on a weekly basis, and the seminar is broadcasted on ports 80 and 54. I just switched to verizon and can no longer access my seminars. I spent several hours speaking with the reps, I have logged into my router and added the custom ports, verizon rep has played with my firewall settings, he said the I added the ports correctly, he seemed to not know that verizon blocks port 80. Is there someway I can get them to open the port? I absolutely need my seminar! Please help.

  23. AJ, why are you ranting at verizon for your computer locking up? That’s not a function of the ISP. It’s also not the ISP’s fault that you have a virus. If you have a virus, it’s the fault of your antivirus software or the lack of it. I’ve had FIOS 50/20 internet for the past 6 years. It has not been down one time. I actually thought it was down one day, however all of the xmas lights I put up flipped a breaker where fios was plugged in (my fault). I would NEVER switch to another ISP!!!!!

  24. Thank you. Bloody ssh out from my home to the internet wasn’t working. Reset to defaults and it’s ok now. Thanks.

    Hey, what’s up with the 1966 – present? Computers were just big boxes with mag tapes and flashing lights in movies back then.

  25. I’m not sure anyone can help me out there but here goes. I don’t know much about thse settings or technical aspects of my computor, I don’t know what a FIOS is or or most of the technical jarva means. I just know that I have windows premium 7 and DSL High speed internet through verizon. I had my home phone put in on my auto payment plan with my internet. The next thing I knew they had set me up an account that I couldn’t enter to check my billing and they had added everything there was to add onto my verizon account including direct satellite and I don’t even have one, my tv runs on a regular antenna, I have basic phone service and a $17.99/month DSL HIGH SPEED INTERNET SERVICE. It’s took me 5 months of talking on the phone to them from 9:am until3 to 7:pm 2and3 times a week as well as sharing computors with them from 9:am until up in the night until 2:am (thats 15 hrs straight) several times a week ,but not always that long because I started cutting them off a whole lot earlier until I think we may have this resolved, they had set me up on 2 different user accounts, we are still working on it. Now that they have me set on just my basic phone service along with my DSL HIGH SPEED Internet my internet connection has slowed way down, when I turn my system on and there is an update due and tries to install the update the update fails and goes off my screen due to my internet connection has not connected yet, it has a yellow triangle flag with a! in the middle of it after the x clears from the connection box and will not make the connection until the little yellow triangle goes away. what is causing that yellow triangle to come up and taking so long for my internet to make it’s connection

Leave a Reply

Your email address will not be published. Required fields are marked *