OPNsense Forum

English Forums => Zenarmor (Sensei) => Topic started by: Meg on March 03, 2025, 07:58:57 PM

Title: Zenarmor reports Src Hostname switching from ip address to hostname.localdomain
Post by: Meg on March 03, 2025, 07:58:57 PM
Hello: I recently started having an issuer where on the two wired hosts on my lan have their Src Hostname switching from ip address to hostname.localdomain in reports and live sessions. If I reset the reporting database they start reporting again with their static ip addresses again but after a wile revert to reporting as hostname.localdomain again. This only happens on the two wired hosts and none on wifi. This is recent since the upgrade to Opnsense 25.1.2. I have never noticed this behavior before. Can anybody give me an explanation for this and a possible fix?
Title: Re: Zenarmor reports Src Hostname switching from ip address to hostname.localdomain
Post by: sy on March 04, 2025, 04:08:38 PM
Hi,

Are the other hostnames accurate? Zenarmor is also capable of utilizing OPNsense alias definitions. You can either add these two hosts with the proper DNS names in Firewall - Aliases or disable the DNS Enrichment feature of Zenarmor in Settings - Privacy - Enable DNS Enrichment.
Title: Re: Zenarmor reports Src Hostname switching from ip address to hostname.localdomain
Post by: Meg on March 05, 2025, 07:51:13 PM
All the other host names on wifi show only ip address which I want. It was only the wired machines that were showing the hostname.localdomain randomly on and off. I switched off dns enrichment in zenarmor as  you sugessted and they just show ip addresses. Thanks for the reply.
Title: Re: Zenarmor reports Src Hostname switching from ip address to hostname.localdomain
Post by: Meg on March 14, 2025, 12:52:45 AM
I though this problem was solved but it keeps coming back. After a restart of Opnsense my two hardwired computers will show the Ip address in the reports. After It has been up and running for a while they will start reporting with Hostname.local domain instead of ip address. All wifi clients always report with ip address as I would like the wired clients to as well. It makes no difference if dns enrichment is enabled or disabled. I have no aliases set in unbound for any clients.
Title: Re: Zenarmor reports Src Hostname switching from ip address to hostname.localdomain
Post by: sy on March 14, 2025, 02:06:06 PM
Hi Meg,

Kindly submit a report through the "Have Feedback" option located in the bottom left corner of the UI to investigate the issue.