OPNsense Forum

English Forums => Zenarmor (Sensei) => Topic started by: ArminF on November 12, 2020, 11:41:14 am

Title: (SOLVED) Custom Application - Use of IP Ranges seems not to work
Post by: ArminF on November 12, 2020, 11:41:14 am

Hi,
just wanted to add a custom application and use IP ranges instead of single Ips.

Name: Google Video Redirector
Category: Ads
Protocol: TCP
Hostnames: redirector.googlevideo.com
IP addresses:
172.217.0.0/16
74.125.24.0/24

But Sensei does not seem to pick the ranges up. Single Ips would work but for googlevideo there is a broad range of Ips reserved.

Screenshot1 - blocking report with included IP from Range.
Screenshot2 - Setup of custom app


Any tip for me?

Thank you very much!

Workaround would be to allow Google Ads in the Application Tab. But i think this would include/open much more.

Title: Re: Custom Application - Use of IP Ranges seems not to work
Post by: ArminF on November 12, 2020, 01:27:09 pm

While checking the Sensei Reports i saw that this IP/DNS might be included in the default Google Ads as well.
Could this block the request up front and so the allowance by the custom app does not activate it?

So to say
Google Ads - blocked
Custom App - allow

First come, first serve?

Title: Re: Custom Application - Use of IP Ranges seems not to work
Post by: sy on November 12, 2020, 06:06:01 pm

Hi @ArminF

Sensei supports IP entries for the custom app yet. The CIDRs that you want to add, sometimes google serve different services from these blocks.
You just add redirector.googlevideo.com to the white list (Web Controls - Auto White list) and Sensei will allow it.

Title: Re: Custom Application - Use of IP Ranges seems not to work
Post by: ArminF on November 12, 2020, 06:11:14 pm

Hi Sy

why complicated when life can be so easy.

Removed from custom app, blocked google ads.
And added the whitelist in the Web control tab.

Thanks you are a STAR!!

Title: Re: (SOLVED) Custom Application - Use of IP Ranges seems not to work
Post by: sy on November 13, 2020, 02:09:38 pm

Hi @ArminF,

My pleasure. Have fun with Sensei.