@provels said in High CPU from lighttp_pfd: .malwarebytes.com thank you very much! also in my case your suggestion solved the issue.

You need to force reload after adding whitelist entries. Also clear the clients DNS cache. -Rico

@Jack37 said in Wrong geoip classification: Is there a chance to reclassify the ip? The theory : As you might know, "pfBlockerNG" doesn't know anything about an IP and their location. The info comes from lists, like the "MaxMind GeoIP " -where you took a subscription to have access to their lists. Contact them if you want something gets changed. The reality : As said often : because the stock with IPv4 has been totally depleted, their is a real traffic of IPv4 going on. Thye are sold and bought all the time in big blocks or small chunks. This traffic is a world wide thing. It's close to impossible to trace - or keep up to date - the exact IP location. It's nice if it works - but often GEOIP info is plain wrong - and/or takes time to mute to another place. Keep in mind : with IPv6 things will get worse as just make a list == mission impossible.

Rico...thanks for the reply. I appreciate your time in answering. Is there anything I need to do in the console such as delete files, change anything, etc.? When I chose to delete the package from the Package Manager, this is what happened, it just hangs - [image: 1605459240842-pfsense-package-manager.png] However, when I checked my dashboard, it looks like it was deleted from my system. I can't be for sure though.

Ah, so a DNS issue then? That would be unrelated to the auto firewall rule ordering you were seeing. Steve

@gwaitsi Have a look at https://www.reddit.com/r/pfBlockerNG/comments/jt9k89/pfblockerng_malwarebytes_telementery_increased/

https://docs.netgate.com/pfsense/en/latest/troubleshooting/upgrades.html#segmentation-fault-in-pkg

@Draco Thanks I like the idea of puutin win update or global dns on a whitelist Havnt come to my mind just yet Thx

This worked. Thanks Ron

I add jasonhill's to a online doc and provided it as feed list.

Thanks both

Excellent. I just re-enabled all the feeds and the whitelisting seems to be working. Thanks! Matt

@sreeram I don't use it, but I suspect you're right.

The DNS-BL VIP uses 10.10.10.1 by default. It looks like you're already using a subnet containing that so you need to change the default value there to something you're not using before it can start. Steve

Yeah, probably not the best idea but it works. Im thinking to run a hotspot and dont want to find myself feeding bots.

I'll get that done this evening or tomorrow morning. I guess it goes without saying it's not a wide spread problem but something out of wack with my config. That you sir!