Messages

Hi,

Please create a ticket by using "Have Feedback" option in the bottom left corner of UI. Then please share the sessions as .csv file in Live Sessions.

https://www.zenarmor.com/docs/reporting-analytics/live-session-explorer#exporting-csv

I have sent a feedback ticket as requested.


UPDATE:  I have received the email and submitted the csv report to the Help Desk.  Thanks.

Hi,

Can you share the some of the domains which is blocked as malware and IPs of them?


Best regards

There are over 8000 entries over the past 72 hours.  Can you please tell me how to generate this information in a form that's useful to you?

Thanks.

Hello.  Since Zenarmor updated to engine version 2.3.2 - Jan 12, 2026 9:56 AM, I am showing thousands of blocked Malware/Virus detections per day which I believe are false positives, and the Treatlife app is no longer working to control grouped Treatlife smart light bulbs, although individual bulb control does still work.

Verified by changing packet engine to Passive Mode (reporting only), which restores the group bulb control in the Treatlife app.

Thanks.

Just FYI:  found that ZenArmor is blocking npr.org as a warez site.  The npr.org site is actually a news site belonging to National Public Radio.

Windows 11 22h2 is the SMB host, Windows 10 22h2 is the SMB client.

Running ZenArmor engine 1.14.2, database 1.14.23072611.

SMB connection fails unless ZenArmor is configured in Passive mode.

What is the setting that would allow SMB connections with ZenArmor in Routed Mode please?

I don't know if what I want to do is possible -- having setup NordVPN using OpenVPN, is there a way that a specific set of URL's can bypass the VPN?

I know you can set specific device(s) to not use the VPN, but what I want is to be able to define URL's that will not route through the VPN for all connected devices.

Any thoughts / help greatly appreciated!

Having same issue since this morning's update.

You are using Unbound in "query forwarding mode."  Basically, you are just pointing the router to NordVPN's DNS servers.

I have found a work-around, though I don't quite follow why it works.

After a cable modem reboot / restart, and I log into the firewall, dhcpd6 will be dead.  If I restart dhcpd6 and try to release / reload on the WAN interface, dhcpd6 just dies again.

However, if I start hdcpd6 and then restart the unbound DNS service, I can do a release / reload without dhcpd6 dying, restoring ipv6 connectivity.

I appreciate the tip!  Unfortunately, did not make any difference in my case.  Exact same symptoms.

OPNSense 23.1, ipv6 works but if the cable modem reboots, dhcpd6 dies.  You can restart it but ipv6 connectivity never returns. If you try to release / reload on the WAN interface, dhcpd6 immediately dies again.

To restore ipv6 connectivity, you have to reboot the firewall.

In the previous OPNSense version, same configuration, dhcp6 would stay up past a modem reboot and release / reload worked without killing the service.

Update -- this seems to relate to issues with Unbound DNS.  Because of not being able to check email (Comcast), I have moved back from Unbound to using a separate Pi.Hole DNS server, and this appears to resolve the issue with the telemetry gadget not showing correctly.

With 23.1, on the Dashboard, the widget for Telemetry Status for ET Telemetry just shows a spinning circle.  The first time I noticed, I removed the widget and added it back, which seemed to resolve it.  However, a few minutes later, back to the spinning circle.

Thanks.