Messages

Hi,

This value is not a configurable parameter within the engine, so it cannot be modified. Furthermore, DNAT typically does not increase session counts. I recommend investigating whether the traffic is being generated by a specific client and checking that client for any potential anomalies.

Hi,

This issue is triggered during heavy UDP traffic when the client reuses the same source port for new requests. Since Zenarmor maintains UDP state tracking, these duplicate tuple requests initially get blocked due to state collision. However, because the client continuously retries on the same port, the state table clears or re-binds the flow, causing the traffic to pass through anyway.

Hi everyone,

Good news for those experiencing this exact kernel panic on OPNsense 26.7:

The root cause—a race condition in generic_mbuf_dtor() during Netmap generic adapter teardown (generic_netmap_dtor)— officially addressed by the OPNsense core team.

You can track the issue, patch status, and upcoming fixes directly on GitHub here:

👉 https://github.com/opnsense/src/issues/314

Thanks to the OPNsense team!

Hi,

It seems different from QUIC issue. We need to check the config file.

Hi,

Can you share the configuration via "'Have Feedback" option?

Hi,

Thank you for your feedback. This has been scheduled for investigation and will be included in an upcoming release. In the meantime, you can add this as a Custom Application by monitoring user sessions via the Live Sessions connections report. Please refer to the following documentation for further details:

https://www.zenarmor.com/docs/opnsense/policies/application-control-rules#definingupdating-a-custom-application


Best regards

Hi,

There is no known issue with WG interface.

Could you please provide the logs and configuration by following the steps outlined in the link below? I kindly request that you select all checkboxes. 
https://www.zenarmor.com/docs/support/reporting-bug␀;

Hi @RutherDiehard,

Thank you for the feedback. We will check the theme issue.

Hi all,


We are happy to let you know that our testing is now complete and everything is ready! You can now safely proceed with your OPNsense upgrade.

Thank you for your patience and support!

Hi all,


We are happy to let you know that our testing is now complete and everything is ready! You can now safely proceed with your OPNsense upgrade.

Thank you for your patience and support!

Hi all,

Thank you for the reports. We have seen similar issues from other users after the latest update, and our team needs some more time to run additional update tests.

We are working on it and will share an update as soon as possible. Thank you for your patience!"

OPNsense 26.7 has just been released. To ensure a smooth transition and prevent any potential service disruptions, we kindly advise our users to hold off on upgrading their OPNsense systems until we officially announce full compatibility.
Our team is currently running final regression tests on the new release. We will share a follow-up announcement as soon as the green light is given. Thank you for your patience and cooperation!

Hi,

Thank you for choosing Zenarmor and reaching out to the community! We completely understand your perspective; it is highly practical to prefer using the "Exempted Networks" feature for flexibility in network management.

The logic behind why these two features are separated into different tiers comes down to how they function technically:

Policy-Based Whitelisting (Free Edition): With this method, traffic is still processed and analyzed by the Zenarmor engine. It simply allows specific items (like websites or IPs) based on your custom rules. Since the traffic remains within the filtering mechanism, it is available in the Free edition.

Exempted VLANs & Networks (Premium): This feature completely bypasses the Zenarmor engine. Traffic coming from the VLANs or networks you select goes straight through without being analyzed or processed by Zenarmor at all.

Because this advanced bypass control and total traffic exemption go beyond the standard filtering capabilities of the Free edition, it is included in our premium features. To unlock and use this feature, a minimum of a Zenarmor Home Edition license is required. The Home license is specifically designed to be a budget-friendly option for home users who need these advanced networking capabilities.

Best regards

Hi,

Application DB updates are generally delivered alongside new releases or via urgent version updates. Please note that custom applications entered into the OPNsense UI are sent as feedback by default. However, contributing further application names is completely at your discretion. To support the continuous improvement of our database, you may optionally submit additional application names using the 'Have Feedback' feature in the bottom-left corner of the UI.

Hi,

It appears you are using Elasticsearch 5. Please note that Zenarmor has officially discontinued support for this version. As previously announced, we recommend that users currently on Elasticsearch 5 or MongoDB migrate to Elasticsearch 8 or SQLite. To update your configuration, please navigate to Settings > Reporting & Data > Reporting Database > Change Reporting Database and select Elasticsearch 8.
 
 
Best regards