FW (22.1.10) stops giving internet access until reboot

[zeboulon]

During last 3 days the fw has stopped passing traffic through randomly 4 times.
Nothing changed in the config.
Nothing found in the logs, works immediately after reboot.
Thoughts?

Edit: it's running in Hyper-V 2016.

[enpassant]

Are you running Zenarmor?


Sent from my iPhone using Tapatalk Pro

[zeboulon]

Yes, I am.
Will uninstall that now. This is now happening multiple times every day.
It seems like the external interface just stops working.
The update feature in OPNsense can't connect either.
The internal interface works though, and the logs arn't saying anything at all. (those I'm looking at least)
(edit: wrote install instead of uninstall)

[enpassant]

Yes, I am.
Will install that now. This is now happening multiple times every day.
It seems like the external interface just stops working.
The update feature in OPNsense can't connect either.
The internal interface works though, and the logs arn't saying anything at all. (those I'm looking at least)

I had a similar problem lately and did memory tests (passed), reinstalled the bios and OPNsense, and after ruling other things out, I uninstalled Zenarmor and the problem stopped. I have been using ZA since May with no problems, but since 22.1.9 and creating some pretty gnarly profiles on ZA, it started crashing. I am not saying it's ZA alone, as I have not heard much in the forums about this until your post. Try your setup without ZA. If it still happens we can rule that out. You should also try a memory test to rule that out (try that first).

[zeboulon]

After uninstalling Zenarmor it hasn't occured...
Got to be careful when installing such big plugins, obviously.
It wasn't possible to ping from the WAN interface using the diagnostics, until after reboot, so I uninstalled Zenarmor. 24hrs later all seems fine.

[RemiOS]

I've experienced this same issue in several locations on several version of firmware since 02/02/2022.

I have yet to find a fix, ZenArmor is install across all devices. I'll run a diagnostic test here: I'll uninstall ZenArmor on 2 firewalls, reinstall on 2 firewalls, and leave it on 2 firewall and I'll let you know if the crashes stop.

All firewalls are identical hardware. This ZenArmor fix looks promising :)

[enpassant]

I am glad you posted this because since my original post, I have an update. It was not actually Zenarmor that was the problem. For me it was the ElasticSearch database that, for some reason, was not compatible with my setup. I have since reinstalled Zenarmor and am now using MongoDB. My system has been running fine. It took weeks of troubleshooting to resolve the issue. Maybe this would be helpful to you, too. I do find Zenarmor to be a great tool with the proper setup. I hope this is helpful.