OPNsense Forum

English Forums => Zenarmor (Sensei) => Topic started by: arthurdaire on January 05, 2026, 06:01:54 AM

Title: Youtube NOT blocked
Post by: arthurdaire on January 05, 2026, 06:01:54 AM
Hi,

I have been using Zenarmor to block youtube videos (App Controls under the default policy). Yesterday found my daughter watching a youtube video (which is supposed to be blocked). Checked the settings again and everything is set to block youtube.

Why is youtube still allowed despite the correct settings? a bug?
Title: Re: Youtube NOT blocked
Post by: JamesFrisch on January 05, 2026, 07:07:30 AM
Was she watching on a iPhone or iPad with iCloud Privacy extension enabled? Not sure if Zenarmor can block this. Sorry total noob, never used Zenarmor.
Title: Re: Youtube NOT blocked
Post by: Seimus on January 05, 2026, 03:27:53 PM
Check in ZA logs for your daughter, if you see the device she used to connect to youtube. Check Connections as well block tabs. What do you see there.

Regards,
S.
Title: Re: Youtube NOT blocked
Post by: arthurdaire on January 06, 2026, 03:25:11 AM
Quote from: JamesFrisch on January 05, 2026, 07:07:30 AMWas she watching on a iPhone or iPad with iCloud Privacy extension enabled? Not sure if Zenarmor can block this. Sorry total noob, never used Zenarmor.

Was Using her macbook air. Will have a look. Thanks
Title: Re: Youtube NOT blocked
Post by: arthurdaire on January 06, 2026, 03:26:12 AM
Quote from: Seimus on January 05, 2026, 03:27:53 PMCheck in ZA logs for your daughter, if you see the device she used to connect to youtube. Check Connections as well block tabs. What do you see there.

Regards,
S.

Thanks for that. Will check
Title: Re: Youtube NOT blocked
Post by: sy on January 08, 2026, 12:33:53 PM
Hi @arthurdaire,

Please block QUIC protocol as well in Media Streaming category.
Title: Re: Youtube NOT blocked
Post by: Seimus on January 08, 2026, 06:37:47 PM
Quote from: sy on Today at 12:33:53 PMHi @arthurdaire,

Please block QUIC protocol as well in Media Streaming category.

This will block all UDP 443 not only the one designed for youtube and not only QUIC as it will match as well DTLS (TLS over UDP). Google is not the only company using this. So careful.

Regards,
S.