OPNsense Forum

English Forums => Zenarmor (Sensei) => Topic started by: abuseif on May 06, 2023, 01:54:51 PM

Title: V1.13 after upgrade does not block web sites
Post by: abuseif on May 06, 2023, 01:54:51 PM
Hello,

After upgrade it does not block sites ie sex.com while it is been blocked in web controls (Adult)
Title: Re: V1.13 after upgrade does not block web sites
Post by: dave on May 06, 2023, 04:29:40 PM
can confirm there appears to be an issue here with the essentially security policies

if any of the following are enabled, all filtering across app, web, and security stops working :

bad ip
non-existent domains
hacking sites
potentially dangerous
undecided not safe

tested using mobile browser with no addons enabled and an ad block test site

just went through the essential sec policies enabling and disabling one after another
Title: Re: V1.13 after upgrade does not block web sites
Post by: abuseif on May 06, 2023, 05:32:28 PM
Thank you for your tip. I disabled all Essential Security, and it works now.

I know this is not OK, I think we have to wait for patch upgrade
Title: Re: V1.13 after upgrade does not block web sites
Post by: abuseif on May 07, 2023, 02:37:20 PM
They replied to my bug report with a patch file, but unfortunately I could not down load it , still waiting for their reply how can I download the patch
Title: Re: V1.13 after upgrade does not block web sites
Post by: dave on May 07, 2023, 03:22:17 PM
I'm seeing very high RAM usage to (+/-80% of 4GB) with high usage related to what appears to be ZenArmor services

I tried reinstalling ZenArmor and then opnsense factory reset, but none of it helped

Saw a msg saying services were waiting to start or failing

Looks like there's something wrong with it, for me at least (us)
Title: Re: V1.13 after upgrade does not block web sites
Post by: abuseif on May 07, 2023, 09:23:55 PM
I applied the patch , now everything is working as expected,  I would like to thank the support team for their  quality of support. I would like also to thank Dave for sharing his finding which defiantly helped for identifying the issue.
Title: Re: V1.13 after upgrade does not block web sites
Post by: johndchch on May 07, 2023, 10:29:53 PM
Quote from: dave on May 07, 2023, 03:22:17 PM
I'm seeing very high RAM usage to (+/-80% of 4GB) with high usage related to what appears to be ZenArmor services

main culprit seems to be elastisearch - eastpect itself has a big footprint but very little actually resident

CPU   PID USER       PRI  NI  VIRT   RESâ–˝S CPU% MEM%   TIME+  Command
  7 56969 elasticsea  52   0 4721M 2150M S  0.0 26.4 32:18.91 /usr/local/openjdk8/bin/java -Xms2g -X
  0 39443 root        20 -20 18.8G  421M S  0.0  5.2 10:40.59 eastpect: Eastpect Instance 0
  0 36637 root        20 -20  861M  202M S  0.0  2.5  0:43.57 /usr/local/sensei//bin/eastpect -D
  0 39574 root        52 -20  858M  201M S  0.0  2.5  0:00.00 eastpect: Eastpect Streamer Instance

Title: Re: V1.13 after upgrade does not block web sites
Post by: almodovaris on May 08, 2023, 01:36:48 AM
Yup, I have sensed that 1.13 did not block the advertisements. But that solved itself sooner or later. And, yup, the whole memory consumption is close to 4 GB (3900 MB), but since I have 16 GB RAM, that does not seem to be a problem.

I see that eastpect uses 539 MB RAM and elasticsearch 5214 MB (of which 2682 MB res).

top says 8992 MB are free. I also have a 5.2 TB zfs RAID with 4 hard disks, perhaps there is where much memory goes to.
Title: Re: V1.13 after upgrade does not block web sites
Post by: almodovaris on May 13, 2023, 11:47:18 PM
And, yup, sex.com isn't "Adult", it's "Pornography".