Google Voice keeps getting blocked

Started by lorem, March 03, 2026, 09:23:34 PM

Previous topic - Next topic
Google Voice is occasionally blocked. When I look at Live sessions I see two blocks:

The first Blocked Domain is stun.l.google.com. Block message is Conferencing category
If I allow all of Conferencing category, stun.l.google.com is still blocked

The second Blocked Domain 74.125.39.xxx (xxx = it changes). App protocol is STUN Protocol. Block message is Network Management category
There is no STUN Protocol in Network Management category. In App Controls -> VOIP -> VoIP STUN was already enabled.

I can individually enable these in Live Sessions -> Blocks. But Google occasionally changes a port or address setting and then I silently lose incoming calls until I discover I can't make a call. Besides allowing everything which would defeat the purpose of Zenarmor, I don't see any way to fix this.

Did you try to restart ZA after allowing it in the policies?

Regards,
S.
Networking is love. You may hate it, but in the end, you always come back to it.

OPNSense HW
N355 - i226-V | AQC113C | 16G | 500G - PROD

PRXMX
N5105 - i226-V | 2x8G | 512G - NODE #1
N100 - i226-V | 16G | 1T - NODE #2

Hi,

Did restarting resolve the issue? If the problem persists, please reach out to support using the "Have Feedback" option located in the bottom left corner of the UI.

As soon as I add the blocked IP to the exclusion it works. Restarting isn't necessary. The problem happens when Google changes the IP or port.

I already did the "Have Feedback" last time and I had several messages back and forth with the support person. The last one he wanted me to make and send Wireshark CAP files. I feel if they really want to debug what is a problem in their software they would do it themselves. This is not a configuration issue on my end, so I stopped at that point.

I am not on the business level subscription with official support, so I hope perhaps I can get more eyes on this issue by posting here. I think that Google Voice is a very popular app should be listed in Policy -> App controls. At the least I want to point out the inconsistency of how categories are processed as I did in my original post above.