OPNsense Forum

English Forums => Zenarmor (Sensei) => Topic started by: JRC on December 04, 2021, 02:27:21 am

Title: Time base policy
Post by: JRC on December 04, 2021, 02:27:21 am

I am trying to create a policy that restricts certain things during specific hours. Essentially disable certain sites and categories during homework time.

Here is how I have it set to block midnight to 4pm on Fridays and midnight to 6pm Su - Th and not enforced on Saturdays (see the attached image). There are a few blacklisted sites in this policy.

Well it is currently 514pm on Friday and yet this policy is in effect, and the real time log clearly shows that the site is being blocked by the policy that should not be enforced. If I disable the policy the blocking stops. So it is as if the Zenamor is simply ignoring my schedule for some reason.

Here is the log:

Code: [Select]

Block status Time Source hostname Source port Destination hostname Destination port Block message Interface VLAN Policy
Blocked 12/3/2021 17:22 <int IP> 53570 gateway.discord.gg 443 Blacklisted site access <kids_vlan> 0 Timed Blocking

discord.gg (not set as universal) is on the black list in the policy I call "Timed Blocking" which has the schedule setup as per the image attached. It's notable that the web and app controls are also enforced by this policy outside of the set schedule.

What is that I am doing wrong here?

EDIT: I confirmed that my opnSense is set to the correct timezone, and confirmed that the local time on the box is correct.

Title: Re: Time base policy
Post by: mb on December 04, 2021, 07:17:25 pm

@JRC, thanks. I see that you've created a support ticket. Team have a look at this and they'll get back to you.

Title: Re: Time base policy
Post by: JRC on December 05, 2021, 07:11:21 am

Thanks @mb - I worked out how to do that after I posted here. Looking forward to hearing back from them.