Topics

1

Zenarmor (Sensei) / Zenarmor(Sensei) causes disconnects

« on: April 25, 2022, 04:26:59 pm »

Hello,

I'm running:

OPNsense 22.1.6-amd64
FreeBSD 13.0-STABLE
OpenSSL 1.1.1n 15 Mar 2022

on:

Intel(R) Core(TM) i5-4570 CPU @ 3.20GHz (4 cores, 4 threads) with 16GB RAM.
My ISP offers a 1 Gbps connection with PPPoE authentication and dynamic IP address.

I have Zenarmor(Sensei) installed and configured(on LAN interfaces) for some time now and it's been working perfect, but for about 2 weeks I keep getting 3 daily disconnects within the same time range with random behavior.
Time range:

• In the morning: between 10:00 to 11:00
• Evening: 19:00
• Night: 03:00

Random behavior: Sometimes all the LAN clients can't access the internet but the WAN connection doesn't change the IP address. Sometimes the WAN IP get's changed, meaning the PPPoE connection has been reinitialized.

It's not a big deal, but it's annoying especially if I'm working from home and have a VPN connection to the office, or my outgoing ssh connections from other servers get dropped.

I've checked the cron and I don't have anything running around that time.
I've arrived at the conclusion that Sensei is to blame after uninstalling it and seeing the issues disappear for a couple of days and having the issues reappear immediately after reinstalling.

Has anyone else experienced this sort of behavior?

2

20.7 Legacy Series / [SOLVED] Unbound DNSBL autoadds yoyo to custom list

« on: January 12, 2021, 05:34:29 pm »

Hello all,

I have encountered a strange behavior of DNSBL on:
 
OPNsense 20.7.7_1-amd64
FreeBSD 12.1-RELEASE-p11-HBSD
OpenSSL 1.1.1i 8 Dec 2020

It always adds the yoyo list as a custom URL, even if I delete it.
It can be found in Services:Unbound DNS:Blacklist:URLs of Blacklists (section available after you click on Advanced Mode)

In /var/unbound/etc/blacklists.ini besides the checked predefined list I have:

custom_1=https://pgl.yoyo.org/adservers/serverlist.php?hostformat=hosts&showintro=0&mimetype=plaintext

Is this a bug or a feature? Because I can't seem to get rid of it. No matter from where I delete it (GUI or CLI).