OPNsense Forum

English Forums => Zenarmor (Sensei) => Topic started by: lorem on March 03, 2026, 09:23:34 PM

Title: Google Voice keeps getting blocked
Post by: lorem on March 03, 2026, 09:23:34 PM
Google Voice is occasionally blocked. When I look at Live sessions I see two blocks:

The first Blocked Domain is stun.l.google.com. Block message is Conferencing category
If I allow all of Conferencing category, stun.l.google.com is still blocked

The second Blocked Domain 74.125.39.xxx (xxx = it changes). App protocol is STUN Protocol. Block message is Network Management category
There is no STUN Protocol in Network Management category. In App Controls -> VOIP -> VoIP STUN was already enabled.

I can individually enable these in Live Sessions -> Blocks. But Google occasionally changes a port or address setting and then I silently lose incoming calls until I discover I can't make a call. Besides allowing everything which would defeat the purpose of Zenarmor, I don't see any way to fix this.
Title: Re: Google Voice keeps getting blocked
Post by: Seimus on March 04, 2026, 12:15:35 PM
Did you try to restart ZA after allowing it in the policies?

Regards,
S.
Title: Re: Google Voice keeps getting blocked
Post by: sy on March 04, 2026, 05:09:52 PM
Hi,

Did restarting resolve the issue? If the problem persists, please reach out to support using the "Have Feedback" option located in the bottom left corner of the UI.
Title: Re: Google Voice keeps getting blocked
Post by: lorem on March 04, 2026, 11:30:56 PM
As soon as I add the blocked IP to the exclusion it works. Restarting isn't necessary. The problem happens when Google changes the IP or port.

I already did the "Have Feedback" last time and I had several messages back and forth with the support person. The last one he wanted me to make and send Wireshark CAP files. I feel if they really want to debug what is a problem in their software they would do it themselves. This is not a configuration issue on my end, so I stopped at that point.

I am not on the business level subscription with official support, so I hope perhaps I can get more eyes on this issue by posting here. I think that Google Voice is a very popular app should be listed in Policy -> App controls. At the least I want to point out the inconsistency of how categories are processed as I did in my original post above.