V1.13 after upgrade does not block web sites

Started by abuseif, May 06, 2023, 01:54:51 PM

Previous topic - Next topic
Hello,

After upgrade it does not block sites ie sex.com while it is been blocked in web controls (Adult)

can confirm there appears to be an issue here with the essentially security policies

if any of the following are enabled, all filtering across app, web, and security stops working :

bad ip
non-existent domains
hacking sites
potentially dangerous
undecided not safe

tested using mobile browser with no addons enabled and an ad block test site

just went through the essential sec policies enabling and disabling one after another

Thank you for your tip. I disabled all Essential Security, and it works now.

I know this is not OK, I think we have to wait for patch upgrade

They replied to my bug report with a patch file, but unfortunately I could not down load it , still waiting for their reply how can I download the patch

I'm seeing very high RAM usage to (+/-80% of 4GB) with high usage related to what appears to be ZenArmor services

I tried reinstalling ZenArmor and then opnsense factory reset, but none of it helped

Saw a msg saying services were waiting to start or failing

Looks like there's something wrong with it, for me at least (us)

I applied the patch , now everything is working as expected,  I would like to thank the support team for their  quality of support. I would like also to thank Dave for sharing his finding which defiantly helped for identifying the issue.

Quote from: dave on May 07, 2023, 03:22:17 PM
I'm seeing very high RAM usage to (+/-80% of 4GB) with high usage related to what appears to be ZenArmor services

main culprit seems to be elastisearch - eastpect itself has a big footprint but very little actually resident

CPU   PID USER       PRI  NI  VIRT   RESâ–˝S CPU% MEM%   TIME+  Command
  7 56969 elasticsea  52   0 4721M 2150M S  0.0 26.4 32:18.91 /usr/local/openjdk8/bin/java -Xms2g -X
  0 39443 root        20 -20 18.8G  421M S  0.0  5.2 10:40.59 eastpect: Eastpect Instance 0
  0 36637 root        20 -20  861M  202M S  0.0  2.5  0:43.57 /usr/local/sensei//bin/eastpect -D
  0 39574 root        52 -20  858M  201M S  0.0  2.5  0:00.00 eastpect: Eastpect Streamer Instance


May 08, 2023, 01:36:48 AM #7 Last Edit: May 08, 2023, 01:55:18 AM by almodovaris
Yup, I have sensed that 1.13 did not block the advertisements. But that solved itself sooner or later. And, yup, the whole memory consumption is close to 4 GB (3900 MB), but since I have 16 GB RAM, that does not seem to be a problem.

I see that eastpect uses 539 MB RAM and elasticsearch 5214 MB (of which 2682 MB res).

top says 8992 MB are free. I also have a 5.2 TB zfs RAID with 4 hard disks, perhaps there is where much memory goes to.
OPNsense HW:

Minisforum Venus series UN100C, 16 GB RAM, 512 GB SSD
T-bao N9N Pro, 16 GB RAM, 512 GB SSD

May 13, 2023, 11:47:18 PM #8 Last Edit: May 15, 2023, 01:08:30 AM by almodovaris
And, yup, sex.com isn't "Adult", it's "Pornography".
OPNsense HW:

Minisforum Venus series UN100C, 16 GB RAM, 512 GB SSD
T-bao N9N Pro, 16 GB RAM, 512 GB SSD