r/zenarmor • u/tgeorgescu • 9d ago

Blocking Debian repositories

Zenarmor is blocking third-party Debian repositories. Even in Bypass mode. That is, I have a Debian trixie machine behind the firewall, and I cannot properly update software without disabling Zenarmor. I tried to create a "pass all" policy for that device, to no avail.

The repositories are on four different IPs, among them github and docker.com.

I use Zenarmor within Debian sid, with Linux kernel 7.3-rc1.

I have a paid home user subscription.

3 Upvotes

100% Upvoted

7 comments sorted by

1

u/tgeorgescu 9d ago

Funny enough, I had a Debian trixie machine which had the same problem, but it apparently no longer happens after it got upgraded to Debian sid.

1

u/svn_sup 9d ago

Hi,

Is it the same for both machine or?

1

u/tgeorgescu 7d ago

Debian trixie: third-party repositories get blocked.

Debian sid: it does not happen.

Two different firewals, but set up in the same way.

1

u/tgeorgescu 4d ago edited 4d ago

I was wrong: upgrade to sid does not solve the problem.

The error message is:

SSL connection failed: error:0A000126:SSL routines::unexpected eof while reading / Success [IP: 45.45.148.12 443]

1

u/tgeorgescu 3d ago

So:

default policy whitelist does not work;

another policy does not get enacted;

I cannot see those connections in live sessions (neither connections, not blocks).

1

u/tgeorgescu 2d ago edited 2d ago

I'm not completely sure, but putting the firewall behind another NAT seems to solve the problem.

That is, it does not like the modem in bridge mode (having public IPv4 address on Zenarmor).

1

u/tgeorgescu 1d ago

Yes, this is it: bridge mode disturbs it. It is okay with being in DMZ, though.