Senarmor/ Suricata / DMZ interface stops

[hgerding]

Hi,

I am having an issue where the zenarmor/ (netmap?) stops working (It may be a stall) most of the time I can still access the firewall if it is through a different interface on the firewall. I have had at least once where I could not access the firewall at all (I tried 2 out of the three interfaces)

I have tried to update the software and changed all of the hardware. (I7, 32 gig of ram 6 interfaces)

This has been happening since 23.x (jan?) and it just seems to be worsening. It is currently bypassed.

version and software information below.

Type   opnsense   
Version   23.1.7_3   
Architecture   amd64   
Commit   b084e7458   
Mirror   https://pkg.opnsense.org/FreeBSD:13:amd64/23.1   
Repositories   OPNsense, SunnyValley   
Updated on   Fri May 5 16:32:58 MDT 2023   
Checked on   N/A

os-clamav (installed)   1.8   47.7KiB   OPNsense   Antivirus engine for detecting malicious threats   
os-ddclient (installed)   1.13   96.7KiB   OPNsense   Dynamic DNS client   
os-dmidecode (installed)   1.1_1   2.82KiB   OPNsense   Display hardware information on the dashboard   
os-hw-probe (installed)   1.0_1   9.96KiB   OPNsense   Collect hardware diagnostics   
os-iperf (installed)   1.0_1   24.6KiB   OPNsense   Connection speed tester   
os-ntopng (installed)   1.2_2   20.5KiB   OPNsense   Traffic Analysis and Flow Collection   
os-redis (installed)   1.1_2   68.4KiB   OPNsense   Redis DB   
os-sensei (installed)   1.13.1   205MiB   SunnyValley   Next Generation Firewall Extensions for OPNsense (ZENARMOR)   
os-sensei-updater (installed)   1.13   4.79KiB   SunnyValley   OPNsense ZENARMOR Plugin Updater   
os-sunnyvalley (installed)   1.2_3   643B   OPNsense   Vendor Repository for Zenarmor (a.k.a Sensei, Next Generation Firewall Extensions)   
os-theme-rebellion (installed)   1.8.8   5.20MiB   OPNsense   A suitably dark theme   
os-vnstat (installed)   1.3_1   22.1KiB   OPNsense   Network traffic monitor   
os-wireguard (installed)   1.13_5   55.5KiB   OPNsense   WireGuard VPN service   
os-zabbix-agent (installed)   1.13_2   50.0KiB   OPNsense   Zabbix monitoring agent

Harm

[sy]

Hi,

Is it stable when Zenarmor in bypass mode? Can you check if there si core file under /root or /usr/local/sensei/support/crash_dumps?

[hgerding]

Sorry missed the replies, it is working with the same config (No longer in bypass mode) with 23.7