Messages

Aloha,

just stumbled over a block which i think should not happen.

lbry.tv used a cdn network cdn.lbryplayer.xyz which gets blocked as Potentially Dangerous Sites in the security options. As soon as i disable this option in -> Sensei - Security -Potentially Dangerous Sites = Off the page and stream starts.

To keep this option on would i be able to add it into the Auto Whitelist to allow this cdn network?
thanks!
armin

Hi Sy,
ok i removed all domains from the auto whitelist and restarted the packet engine.
Lets see tomorrow. I will report.

thanks for your help and support Sy!!

Hi Sy,

thanks. Google Ads is still blocked as i did add most of the needed stuff in the auto whitelist.

Shall i do/test something?

thanks
armin

Here is my Auto Whitelist so far

1   connectivitycheck.gstatic.com -> youtube needs this otherwise it loads forever....
2   drive.google.com      
3   fotos.google.com      
4   google.com      
5   googleapis.com      
6   googlevideo.com      
7   hangouts.googleapis.com   -> not sure if i still need the subdomain as the main is above   
8   mail.google.com      
9   meet.google.com         
10   youtu.be   -> did not work without it. Youtube app is allowed but short links failed.   
11   youtube.com

So as you see i had to add the subdomains as well as the master domains for google to get it to work.
the auto whitelist settings are not set as global allow as i do have just one policy in freeware mode.

armin

Dear Sy,

i did saw a block for Google Ads while triggering a meet.google.com link.
Actually my wife triggered her meeting and got blocked by sensei as meet was not in the whitelist anymore.

So i went back and re-added all the sub domains she is using to the auto whitelist and after a few minutes she was able to access meet.google.com again.

What i can imagine is that her company has some dedicated ip ranges or reservations from google which maybe get blocked or seen as ads.

Not quite sure how i could drill down these DNS addresses as i see the Ips on the reports.

thanks Sy and sorry for bothering about this.
On the other hand i could "just" allow the ads...

armin

Well, this is getting weird...

Did update to latest Version of the App DB cleaned out my whitelist.
And right today it started again.

No meet.google.com, No drive.google.com and so on...
So i had to reenable all the sub domains back to the whitelist.

The thing is that my wife is in home office and she has to rely on working connections.
I must consider to allow google ads in my config sooner or later.

I know there are tons of Ips for google and they do use or offer the same services including the ads.
So its pretty difficult to distinguish between what is green and what red...

.. ... armin

Thanks Sy!

I will keep an eye on it. I cannot remember seeing this detail.
I had to install the App DB manually.

cheers armin

The installation of the new DB looks like to be triggered manually.

The update from the running DB is automatically.

Hi Sy
here is a pretty good example which came with the 11-26 update.

i disabled all unneeded VoIP apps. And allowed the transportation layer.
With the update the Telecom came by and was enabled.

So i had to open and recheck my settings with the update. And have to go through one by one for each group.
Here a filter or a different view would be cool to have.

thanks Sy!
cheers armin

Updating the app DB is really important.

Would be cool to have this as "auto" task in cron.

Hi Sy,

so far good news! Could reduce my Whitelist and "still" all is running as it should.
will monitor the blocking in the upcoming days.

thanks!
armin

Hello,
just a side mark. Maybe this can somehow be taken into consideration.

When new Apps & DB Versions are installed then there are new apps installed activated.
Would be nice if the GUI could be redesign to reflect the changes.
Otherwise you always have to click through all your partial block and refresh your blockings.

If you could see and take action on the new installed apps with a click or a filter this would help a lot.

Just a thought!
thanks
armin

PS: can the auto update be activated somehow on the systems cron tab?

Hi Sy,

thank you very much. Will do the installation.


And with the new version would i be able to use the master domain "google.com" and get rid of the subs?
Also may i get rid of the e1000e.domains as well?

Thank you very much for your help! Much appreciated.

armin

Hi Sy,
App & Rules DB Version:   1.6.20201006130256   Last Update: 10/07/2020 13:01
Engine Version:   1.6.1   Last Update: 10/07/2020 13:01

thanks
armin

Hei,
i have to bother you again but this drives me mad.
We do use most of the google offered services.

Mail, meet, hangout, photos, translate, maps, youtube.. etc...

BUT we do not want analytics or ads from them.
So i configured Sensei as follow:

App Control -> allow all needed Google services BUT block Ads and Analytics
Web Control -> whitelist google.com, youtube and all of the known subdomains.

But still Sensei does block me translate.google.com and you see it in the report blocked as Ads.

As soon i allow Google ADS the translate.google.com page does load.
If not allowed ads the page is blocked even when entered in the Web Control Whitelist.

Anything i do wrong?

I also had to add e1000e.net domain to the whitelist to get deeper into googles jungle and be able to load pictured or files.

Btw. the domain google.com does not seem to be sufficient on the Web control whitelist so i had to add all subs as well.

Anything i miss? do i really have to allow ads to be able to access all sites and services from google?

thanks
armin