Messages

76

23.1 Legacy Series / Re: [CALL FOR TESTING] Netmap generic mode queue stall fixes

« on: February 23, 2023, 01:46:52 pm »

Hi kintaroju,

Did you disable Hardware VLAN Filtering?
https://www.zenarmor.com/docs/guides/disabling-hardware-offloading#disabling-hardware-offloading-on-opnsense

You may also send a bug report to the zenarmor team for further investigation of your issue.

77

Zenarmor (Sensei) / Re: Majority of remote host chart is “Other”

« on: February 21, 2023, 09:17:53 am »

Hi BNacl,
I think the drill-down feature is not available for `Others` since it may have a large number of items.
You may try the filtering capability on Live Sessions Explorer.
https://www.zenarmor.com/docs/opnsense/reporting-analytics/live-session-explorer#search

78

Zenarmor (Sensei) / Re: Is export to CSV from Live Session Viewer a Paid feature?

« on: February 16, 2023, 11:15:52 am »

Hi FullyBorked,

You are right. Export CSV feature is available on Paid subscriptions.

https://www.zenarmor.com/docs/opnsense/reporting-analytics/live-session-explorer#exporting-csv

79

Zenarmor (Sensei) / Re: New install with sensei on protectli vault crashing

« on: February 14, 2023, 10:55:28 am »

Hi REH,
A new test kernel is developed to solve the netmap LAGG issue.
https://forum.opnsense.org/index.php?topic=32114.0

Can you try it and provide feedback?
Thanks

80

Zenarmor (Sensei) / Re: authenticated users and vouchers

« on: February 08, 2023, 12:32:56 pm »

You must enable the Captive portal on your OPNsense and then define user-based filtering rules.
These guides may help you:

https://www.zenarmor.com/docs/guides/user-based-filtering-using-opnsense-captive-portal

https://www.zenarmor.com/docs/network-security-tutorials/how-to-configure-captive-portal-on-opnsense

81

Zenarmor (Sensei) / Netmap VLAN/LAGG issues - Kernel Test

« on: February 02, 2023, 04:29:53 pm »

Hi all,

For several weeks, some Suricata and Zenarmor users have been experiencing packet stalls with VLAN/LAGG interface due to netmap bugs.

To solve these issues and introduce netmap enhancements to FreeBSD, Zenarmor, and OPNsense teams have collaborated with Klara Systems. Some of the developments have already been included in the FreeBSD 14 development branch.

To ship enhancements to OPNsense, last week, the OPNsense team shipped a test kernel.

You may easily install the test kernel:

# opnsense-update -zkr 23.1-netmap
# opnsense-shell reboot

We’ve also run some tests on our side and with some of Zenarmor users. So far so good. The "results" (or rather their absence) seem promising. There are no crashes, no regressions, and no reliability issues.

Thank you to the developers who are contributing to the project and putting in significant work.  However, they need community cooperation now to test and spot and address any remaining issues.

The more tests we can do, the higher chance to catch any missing bugs and solve all issues.

Therefore, any help will be greatly appreciated. Please, join the tests and give feedback.

https://forum.opnsense.org/index.php?topic=32114.0
https://forum.opnsense.org/index.php?topic=32185.0

Best

82

Intrusion Detection and Prevention / Netmap VLAN/LAGG issues - Kernel Test

« on: February 02, 2023, 04:27:47 pm »

Hi all,

For several weeks, some Suricata and Zenarmor users have been experiencing packet stalls with VLAN/LAGG interface due to netmap bugs. 

To solve these issues and introduce netmap enhancements to FreeBSD, Zenarmor, and OPNsense teams have collaborated with Klara Systems. Some of the developments have already been included in the FreeBSD 14 development branch.

To ship enhancements to OPNsense, last week, the OPNsense team shipped a test kernel.

You may easily install the test kernel:

# opnsense-update -zkr 23.1-netmap
# opnsense-shell reboot

We’ve also run some tests on our side and with some of Zenarmor users. So far so good. The "results" (or rather their absence) seem promising. There are no crashes, no regressions, and no reliability issues.

Thank you to the developers who are contributing to the project and putting in significant work.  However, they need community cooperation now to test and spot and address any remaining issues. 

The more tests we can do, the higher chance to catch any missing bugs and solve all issues.

Therefore, any help will be greatly appreciated. Please, join the tests and give feedback.

https://forum.opnsense.org/index.php?topic=32114.0
https://forum.opnsense.org/index.php?topic=32185.0

Best

83

Zenarmor (Sensei) / Re: Issues since Update to 1.12

« on: November 20, 2022, 07:23:16 pm »

Hi pascthin,
Could you send a bug report?
https://www.zenarmor.com/docs/support/reporting-bug

84

Zenarmor (Sensei) / Re: ZenArmor eastpect filesystem full error

« on: November 14, 2022, 02:18:29 pm »

Hi dinguz,
You may try to increase temp size by following the steps in the guide:

https://www.zenarmor.com/docs/opnsense/configuring/reporting-data#size-of-the-fast-temporary-memory-disk-in-megabytes--capacity

85

Zenarmor (Sensei) / Re: Zenarmor - install database - freeze

« on: November 01, 2022, 09:52:49 am »

Could you send a bug report?
https://www.zenarmor.com/docs/support/reporting-bug

86

Zenarmor (Sensei) / Re: High RAM Usage

« on: April 11, 2022, 01:58:56 pm »

Hi c-mu,
Though I don't think that it is the reason for high ram usage, check whether "Anonymize IP address" option is enabled in your Zenarmor Configuration. It's located under Configuration -> Reports & Data -> Reports Data Management.  When you disable the option, it will fix the unique devices count.

87

Zenarmor (Sensei) / Re: Zenamor Strange Behavior

« on: January 29, 2022, 03:51:20 pm »

Hi xeronine,

You can check the article: https://www.zenarmor.com/docs/network-security-tutorials/how-to-block-youtube-on-opnsense

88

Zenarmor (Sensei) / Re: How to do web filtering with Zenarmor?

« on: December 16, 2021, 06:59:56 pm »

Also, official documentation may be helpful: https://www.zenarmor.com/docs/opnsense/policies/web-control-rules

89

Zenarmor (Sensei) / Re: Sensei and Wireguard clients

« on: August 13, 2021, 05:21:00 pm »

Hi marcelmah,

Can you try with tcpdump when Sensei is active? If there is no packet with tcpdump as well, then take the bypass Sensei Packet Engine (Status - Services - Packet Engine - Enter Bypass Mode) and run tcpdump again.

tcpdump -s0 -ni wg0 -vvv

90

Zenarmor (Sensei) / Re: Eastpect and file system full

« on: August 10, 2021, 01:49:46 pm »

Hi fabianodelg,

Increasing the temp disk size may solve your problem. Please refer to the links: https://www.zenarmor.com/docs/support/troubleshooting/sensei-stops-because-of-high-disk-usage
and
https://www.zenarmor.com/docs/opnsense/configuring/reporting-data#size-of-the-fast-temporary-memory-disk-in-megabytes--capacity

Looking forward to the good news.
Be safe