OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • English Forums »
  • Sensei »
  • Sensei on OPNsense - Application based filtering
« previous next »
  • Print
Pages: 1 ... 73 74 [75]

Author Topic: Sensei on OPNsense - Application based filtering  (Read 164840 times)

RamSense

  • Newbie
  • *
  • Posts: 33
  • Karma: 0
    • View Profile
Re: Sensei on OPNsense - Application based filtering
« Reply #1110 on: January 10, 2021, 04:41:32 pm »
I use Opnsense with Sensei and have ads blocked for the Lan devices. Works great. Only problem is with the mobile devices connected by 4g-vpn redirect gateway- sensei -> does not block ads on those devices. Everything else is working. This while I have added both interfaces in sensei-configuration.

Anybody else having this issue? Know how to solve?
Logged

Nekromantik

  • Jr. Member
  • **
  • Posts: 62
  • Karma: 1
    • View Profile
Re: Sensei on OPNsense - Application based filtering
« Reply #1111 on: January 11, 2021, 05:43:52 pm »
Hi

Can we have a free edition for devices less then 15?
I dont have 50 so spending  $10 a month on home seems a lot when max I have 5 devices.
Logged

sy

  • Jr. Member
  • **
  • Posts: 68
  • Karma: 7
    • View Profile
Re: Sensei on OPNsense - Application based filtering
« Reply #1112 on: January 11, 2021, 10:37:54 pm »
Hi @Nekromantik,

You can use the free edition for your network. Home and other licenses provide extra features. But if you ask a license type for fewer devices, unfortunately, the basic license is Home 100.
Logged

Nekromantik

  • Jr. Member
  • **
  • Posts: 62
  • Karma: 1
    • View Profile
Re: Sensei on OPNsense - Application based filtering
« Reply #1113 on: January 11, 2021, 10:40:51 pm »
Quote from: sy on January 11, 2021, 10:37:54 pm
Hi @Nekromantik,

You can use the free edition for your network. Home and other licenses provide extra features. But if you ask a license type for fewer devices, unfortunately, the basic license is Home 100.

ok
Logged

mb

  • Hero Member
  • *****
  • Posts: 709
  • Karma: 72
    • View Profile
    • Sunny Valley Networks
Re: Sensei on OPNsense - Application based filtering
« Reply #1114 on: January 12, 2021, 05:33:15 pm »
Hi @RamSense, can you confirm if blocking is working with PCs over vpn ? I want to make sure if this is a mobile problem.
« Last Edit: January 12, 2021, 05:45:55 pm by mb »
Logged

RamSense

  • Newbie
  • *
  • Posts: 33
  • Karma: 0
    • View Profile
Re: Sensei on OPNsense - Application based filtering
« Reply #1115 on: January 13, 2021, 06:56:17 pm »
@MB,

That is a good question. I tried with my MacBook outside of my network with vpn connection, and the adds appear, no blocking.
When I am on my MacBook on wifi at home, no vpn, adds are being blocked.
At home iPhone wifi - vpn -> no adds getting blocked.
At home iPhone wifi - no vpn -> adds are being blocked
Logged

mb

  • Hero Member
  • *****
  • Posts: 709
  • Karma: 72
    • View Profile
    • Sunny Valley Networks
Re: Sensei on OPNsense - Application based filtering
« Reply #1116 on: January 16, 2021, 06:33:19 pm »
@ramsense, we suspect that this is due to netmap tun support adding null byte ethernet header.

We want to send you a test kernel. Can you reach out to support? Let's take it from there.
Logged

RamSense

  • Newbie
  • *
  • Posts: 33
  • Karma: 0
    • View Profile
Re: Sensei on OPNsense - Application based filtering
« Reply #1117 on: January 16, 2021, 09:36:14 pm »
Thank you for your reply and help.
I have just submitted a support ticket.

Logged

Miheerwa

  • Newbie
  • *
  • Posts: 1
  • Karma: 0
    • View Profile
Re: Sensei on OPNsense - Application based filtering
« Reply #1118 on: January 17, 2021, 09:45:38 am »
Hello all.

I am having an issue with policy rank. It seems that only the default policy works. Any new policy does not work. If set the default to permissive and restrict the new policy, web traffic I expect to be blocked is allowed.


 I want to be able to toggle a working policy instead of updating the default each time I need to turn off filtering.

I tried searching the forum however it doesn't seem I can only search this thread?

I have the home licensing.

Side question: would it be possible to automatically upload block lists or upload lists larger than 100? Or is anything larger only available via the API? (I find the ad blocking and ad tracking 70% effective, and there are lists large lists I would like to import.)
Logged

sy

  • Jr. Member
  • **
  • Posts: 68
  • Karma: 7
    • View Profile
Re: Sensei on OPNsense - Application based filtering
« Reply #1119 on: January 20, 2021, 02:52:45 pm »
Hi @Miheerwa,

The policies work with and condition. Please just be careful about the criteria that you added. For example, if you add an IP and username in the same policy, a session must belong to the IP and username. If one of them doesn't match with the session, Sensei tries to match another policy and if none of them match, the Default policy is applied.

- API support will be added in 1.8
Logged

RamSense

  • Newbie
  • *
  • Posts: 33
  • Karma: 0
    • View Profile
Re: Sensei on OPNsense - Application based filtering
« Reply #1120 on: January 23, 2021, 08:36:17 am »
@MB,

Thank you for the help. support has made a test kernel to solve the (opnsense) netmap problem.
In the first tests it looks like the problems being solved and all is working. Have do to some more testing, but feeling very confident that it is working now! great! thank you/sensei

Logged

mb

  • Hero Member
  • *****
  • Posts: 709
  • Karma: 72
    • View Profile
    • Sunny Valley Networks
Re: Sensei on OPNsense - Application based filtering
« Reply #1121 on: January 24, 2021, 08:39:16 pm »
@RamSense, a pull request is on the way. This might be a bit late for 21.1, but I guess this has a chance for 21.1.1.

https://github.com/opnsense/src/pull/97
Logged

RamSense

  • Newbie
  • *
  • Posts: 33
  • Karma: 0
    • View Profile
Re: Sensei on OPNsense - Application based filtering
« Reply #1122 on: January 24, 2021, 10:02:05 pm »
@MB thnx!
Great to hear it is on the list to being implemented / corrected.

In the meantime, I am very happy with this test kernel, and all is working great now!

Logged

  • Print
Pages: 1 ... 73 74 [75]
« previous next »
  • OPNsense Forum »
  • English Forums »
  • Sensei »
  • Sensei on OPNsense - Application based filtering
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2021 All rights reserved
  • SMF 2.0.17 | SMF © 2019, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2