Messages

Hi,

This could be a netmap-related issue. Have you tried running Zenarmor in bypass mode to see if the problem persists? Additionally, what is the current throughput?

Hi,

Thank you for the detials. We got your request as a ticket as well and investigating it. We will get back to you as soon as possible.

Hi,

This value is not a configurable parameter within the engine, so it cannot be modified. Furthermore, DNAT typically does not increase session counts. I recommend investigating whether the traffic is being generated by a specific client and checking that client for any potential anomalies.

Hi,

This issue is triggered during heavy UDP traffic when the client reuses the same source port for new requests. Since Zenarmor maintains UDP state tracking, these duplicate tuple requests initially get blocked due to state collision. However, because the client continuously retries on the same port, the state table clears or re-binds the flow, causing the traffic to pass through anyway.

Hi everyone,

Good news for those experiencing this exact kernel panic on OPNsense 26.7:

The root cause—a race condition in generic_mbuf_dtor() during Netmap generic adapter teardown (generic_netmap_dtor)— officially addressed by the OPNsense core team.

You can track the issue, patch status, and upcoming fixes directly on GitHub here:

👉 https://github.com/opnsense/src/issues/314

Thanks to the OPNsense team!

Hi,

It seems different from QUIC issue. We need to check the config file.

Hi,

Can you share the configuration via "'Have Feedback" option?

Hi,

Thank you for your feedback. This has been scheduled for investigation and will be included in an upcoming release. In the meantime, you can add this as a Custom Application by monitoring user sessions via the Live Sessions connections report. Please refer to the following documentation for further details:

https://www.zenarmor.com/docs/opnsense/policies/application-control-rules#definingupdating-a-custom-application


Best regards

Hi,

There is no known issue with WG interface.

Could you please provide the logs and configuration by following the steps outlined in the link below? I kindly request that you select all checkboxes. 
https://www.zenarmor.com/docs/support/reporting-bug␀;

Hi @RutherDiehard,

Thank you for the feedback. We will check the theme issue.

Hi all,


We are happy to let you know that our testing is now complete and everything is ready! You can now safely proceed with your OPNsense upgrade.

Thank you for your patience and support!

Hi all,


We are happy to let you know that our testing is now complete and everything is ready! You can now safely proceed with your OPNsense upgrade.

Thank you for your patience and support!

Hi all,

Thank you for the reports. We have seen similar issues from other users after the latest update, and our team needs some more time to run additional update tests.

We are working on it and will share an update as soon as possible. Thank you for your patience!"

OPNsense 26.7 has just been released. To ensure a smooth transition and prevent any potential service disruptions, we kindly advise our users to hold off on upgrading their OPNsense systems until we officially announce full compatibility.
Our team is currently running final regression tests on the new release. We will share a follow-up announcement as soon as the green light is given. Thank you for your patience and cooperation!

Hi,

Thank you for choosing Zenarmor and reaching out to the community! We completely understand your perspective; it is highly practical to prefer using the "Exempted Networks" feature for flexibility in network management.

The logic behind why these two features are separated into different tiers comes down to how they function technically:

Policy-Based Whitelisting (Free Edition): With this method, traffic is still processed and analyzed by the Zenarmor engine. It simply allows specific items (like websites or IPs) based on your custom rules. Since the traffic remains within the filtering mechanism, it is available in the Free edition.

Exempted VLANs & Networks (Premium): This feature completely bypasses the Zenarmor engine. Traffic coming from the VLANs or networks you select goes straight through without being analyzed or processed by Zenarmor at all.

Because this advanced bypass control and total traffic exemption go beyond the standard filtering capabilities of the Free edition, it is included in our premium features. To unlock and use this feature, a minimum of a Zenarmor Home Edition license is required. The Home license is specifically designed to be a budget-friendly option for home users who need these advanced networking capabilities.

Best regards