Zenarmor reports Src Hostname switching from ip address to hostname.localdomain

[Meg]

Hello: I recently started having an issuer where on the two wired hosts on my lan have their Src Hostname switching from ip address to hostname.localdomain in reports and live sessions. If I reset the reporting database they start reporting again with their static ip addresses again but after a wile revert to reporting as hostname.localdomain again. This only happens on the two wired hosts and none on wifi. This is recent since the upgrade to Opnsense 25.1.2. I have never noticed this behavior before. Can anybody give me an explanation for this and a possible fix?

[sy]

Hi,

Are the other hostnames accurate? Zenarmor is also capable of utilizing OPNsense alias definitions. You can either add these two hosts with the proper DNS names in Firewall - Aliases or disable the DNS Enrichment feature of Zenarmor in Settings - Privacy - Enable DNS Enrichment.

[Meg]

All the other host names on wifi show only ip address which I want. It was only the wired machines that were showing the hostname.localdomain randomly on and off. I switched off dns enrichment in zenarmor as  you sugessted and they just show ip addresses. Thanks for the reply.

[Meg]

I though this problem was solved but it keeps coming back. After a restart of Opnsense my two hardwired computers will show the Ip address in the reports. After It has been up and running for a while they will start reporting with Hostname.local domain instead of ip address. All wifi clients always report with ip address as I would like the wired clients to as well. It makes no difference if dns enrichment is enabled or disabled. I have no aliases set in unbound for any clients.

[sy]

Hi Meg,

Kindly submit a report through the "Have Feedback" option located in the bottom left corner of the UI to investigate the issue.