Major DNS Bug 23.01 with Quad9 on SSL

Cylosoft · Apr 17, 2023, 6:02 PM

@stephenw10 Yes. They all started out with Quad9 and TLS.

Enhance2736 · Apr 17, 2023, 6:07 PM

yessir, Quad9 in System > General Setup > DNS Server Settings

Below settings are causing intermittend DNS resolution issues described above by others (can't resolve anything for few minutes then eventually starts resolving):

Address: 9.9.9.9 Hostname for TLS Verification: dns.quad9.net 
Address: 149.112.112.112 Hostname for TLS Verification: dns.quad9.net

When I change above settings to use CloudFlare infont of Quad9 then resolves without issues:

Address: 1.1.1.1 Hostname for TLS Verification: cloudflare-dns.com

Enhance2736 · Apr 17, 2023, 10:25 PM

I am testing now on Quad9 with DoT and it is falilng right now:

❯ ping github.com
ping: cannot resolve github.com: Unknown host

❯ dig github.com

; <<>> DiG 9.10.6 <<>> github.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 40969
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1432
;; QUESTION SECTION:
;github.com.                    IN      A

;; Query time: 27 msec
;; SERVER: 10.11.100.1#53(10.11.100.1)
;; WHEN: Mon Apr 17 18:17:08 EDT 2023
;; MSG SIZE  rcvd: 39

pfSense UI opened and it sat on main page. Then unbound started to resolve:

❯ dig github.com

; <<>> DiG 9.10.6 <<>> github.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 25085
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1432
;; QUESTION SECTION:
;github.com.                    IN      A

;; ANSWER SECTION:
github.com.             39      IN      A       140.82.112.3

;; Query time: 38 msec
;; SERVER: 10.11.100.1#53(10.11.100.1)
;; WHEN: Mon Apr 17 18:21:11 EDT 2023
;; MSG SIZE  rcvd: 55

What i noticed too is that it was failing until i opened pfSense UI and it started to resolve. No idea what is going on lol

stephenw10 · Apr 18, 2023, 3:43 AM

Still nothing logged in the resolver log?

That's weird that it started after you logged in. What widgets do you have on the dashboard?

w0w · Apr 18, 2023, 3:43 AM

After changes made and posted https://forum.netgate.com/post/1094989 I do have fewer problems with DNS responses, but like somebody said it mostly appears when using a mobile device and trying to load some page with a bunch of images and scripts, for example reddit. I see previews but when trying to open large image by clicking on preview, not opening post, it can load it immediately or just hangs and give no output, showing broken image icon. This happens randomly. I am also using pfBlocker-NG, suricata and python mode. All found reddit domains are whitelisted. Nothing unusual in the pfBlocker or suricata logs. Forwarding to Cloudflare and Google servers, using TLS / SSL, using both IPV4 and IPv6 services. Also using multiwan setup. Planning to disable IPv6 and one of the two gateways just to test it again.

Enhance2736 · Apr 18, 2023, 12:34 PM

@stephenw10 Let me get some logs and i will post them here. As far as widgets go i have Gateways, zfs, traffic Grapsh, interfaces, ups status, Firewall logs, OpenVpn, WireGuard, HAProxy, Interface Statistics, Services status, pfBlockerNG, Smart status, Installed Packages, and system information.

As far as system packages:
Name Version
acme 0.7.3_1
arpwatch 0.2.1
haproxy 0.61_9
Netgate_Firmware_Upgrade 0.56
ntopng 0.8.13_10
nut 2.8.0_2
pfBlockerNG 3.2.0_4
Service_Watchdog 1.8.7_1
WireGuard 0.1.6_5

stephenw10 · Apr 18, 2023, 12:47 PM

Hmm, hard to imagine anything there would affect it. Could Unbound have been restarted when you connect to the dash? The resolver logs would show that if so.

Enhance2736 · Apr 18, 2023, 12:55 PM

Ok it is happening now again lol
what i did was switched to quad9 this morning at 8:30 Eastern and logs show bunch of entries around that time. DNS works fine for som time and now it is failing again below is the dig output. Logs literally stop around the time i made the switch to quad9 and applied the changes (assuming it restarts unbound). There are no entries around when DNS failures occur

❯ dig github.com

; <<>> DiG 9.10.6 <<>> github.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 62433
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1432
;; QUESTION SECTION:
;github.com.                    IN      A

;; Query time: 27 msec
;; SERVER: 10.11.100.1#53(10.11.100.1)
;; WHEN: Tue Apr 18 08:48:29 EDT 2023
;; MSG SIZE  rcvd: 39

Unbound logs are set to 4

stephenw10 · Apr 18, 2023, 1:33 PM

If you log into the gui and it starts working is anything logged at that point?

Enhance2736 · Apr 18, 2023, 1:46 PM

@stephenw10 Testing som more. I set logging to 4 around 8:50 am ET. bunch of logs at that point. i am staying logged in and the thing is sporadically stops resolving. Here is an example of SERVFAIL followed by NOERR:

❯ dig developers.redhat.com

; <<>> DiG 9.10.6 <<>> developers.redhat.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 4300
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1432
;; QUESTION SECTION:
;developers.redhat.com.         IN      A

;; Query time: 40 msec
;; SERVER: 10.11.100.1#53(10.11.100.1)
;; WHEN: Tue Apr 18 09:40:44 EDT 2023
;; MSG SIZE  rcvd: 50

❯ dig developers.redhat.com

; <<>> DiG 9.10.6 <<>> developers.redhat.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24803
;; flags: qr rd ra; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1432
;; QUESTION SECTION:
;developers.redhat.com.         IN      A

;; ANSWER SECTION:
developers.redhat.com.  3584    IN      CNAME   developers.redhat.com2.edgekey.net.
developers.redhat.com2.edgekey.net. 21584 IN CNAME developers.redhat.com2.edgekey.net.globalredir.akadns.net.
developers.redhat.com2.edgekey.net.globalredir.akadns.net. 900 IN CNAME e40408.dsca.akamaiedge.net.
e40408.dsca.akamaiedge.net. 4   IN      A       23.221.225.234
e40408.dsca.akamaiedge.net. 4   IN      A       23.221.225.210

;; Query time: 253 msec
;; SERVER: 10.11.100.1#53(10.11.100.1)
;; WHEN: Tue Apr 18 09:40:48 EDT 2023
;; MSG SIZE  rcvd: 235

Unbound log /var/log/resolver.log does not show anything after around restart time (logging level change):

Apr 18 08:50:26 pfSense unbound[1677]: [1677:3] info: receive_udp on interface: 10.11.100.1
Apr 18 08:50:26 pfSense unbound[1677]: [1677:3] debug: mesh_run: start
Apr 18 08:50:26 pfSense unbound[1677]: [1677:3] debug: mesh_run: python module exit state is module_wait_module
Apr 18 08:50:26 pfSense unbound[1677]: [1677:3] debug: iterator[module 1] operate: extstate:module_state_initial event:module_event_pass
Apr 18 08:50:26 pfSense unbound[1677]: [1677:3] debug: process_request: new external request event
Apr 18 08:50:26 pfSense unbound[1677]: [1677:3] debug: iter_handle processing q with state INIT REQUEST STATE
Apr 18 08:50:26 pfSense unbound[1677]: [1677:3] info: resolving api.atlassian.com. A IN
Apr 18 08:50:26 pfSense unbound[1677]: [1677:3] debug: request has dependency depth of 0
Apr 18 08:50:26 pfSense unbound[1677]: [1677:3] debug: forwarding request
Apr 18 08:50:26 pfSense unbound[1677]: [1677:3] debug: iter_handle processing q with state QUERY TARGETS STATE
Apr 18 08:50:26 pfSense unbound[1677]: [1677:3] info: processQueryTargets: api.atlassian.com. A IN
Apr 18 08:50:26 pfSense unbound[1677]: [1677:3] debug: processQueryTargets: targetqueries 0, currentqueries 0 sentcount 0
Apr 18 08:50:26 pfSense unbound[1677]: [1677:3] info: DelegationPoint<.>: 0 names (0 missing), 2 addrs (0 result, 2 avail) parentNS
Apr 18 08:50:26 pfSense unbound[1677]: [1677:3] debug:   [dns.quad9.net] ip4 149.112.112.112 port 853 (len 16)
Apr 18 08:50:26 pfSense unbound[1677]: [1677:3] debug:   [dns.quad9.net] ip4 9.9.9.9 port 853 (len 16)
Apr 18 08:50:26 pfSense unbound[1677]: [1677:3] debug: attempt to get extra 3 targets
Apr 18 08:50:26 pfSense unbound[1677]: [1677:3] debug: rpz: iterator module callback: have_rpz=0
Apr 18 08:50:26 pfSense unbound[1677]: [1677:3] debug: selrtt 376
Apr 18 08:50:26 pfSense unbound[1677]: [1677:3] info: sending query: api.atlassian.com. A IN
Apr 18 08:50:26 pfSense unbound[1677]: [1677:3] debug: sending to target: <.> 149.112.112.112#853
Apr 18 08:50:26 pfSense unbound[1677]: [1677:3] debug: dnssec status: not expected
Apr 18 08:50:26 pfSense unbound[1677]: [1677:3] debug: mesh_run: iterator module exit state is module_wait_reply
Apr 18 08:50:26 pfSense unbound[1677]: [1677:3] info: mesh_run: end 1 recursion states (1 with reply, 0 detached), 1 waiting replies, 0 recursion replies sent, 0 replies dropped, 0 states jostled out
Apr 18 08:50:26 pfSense unbound[1677]: [1677:3] info: 0RDd mod1 rep api.atlassian.com. A IN
Apr 18 08:50:26 pfSense unbound[1677]: [1677:3] debug: cache memory msg=66072 rrset=66072 infra=7808 val=0
Apr 18 08:50:26 pfSense unbound[1677]: [1677:3] debug: serviced send timer
Apr 18 08:50:26 pfSense unbound[1677]: [1677:3] debug: tcp bound to src ip4 127.0.0.1 port 0 (len 16)
Apr 18 08:50:26 pfSense unbound[1677]: [1677:3] debug: the query is using TLS encryption, for dns.quad9.net
Apr 18 08:50:26 pfSense unbound[1677]: [1677:3] debug: comm point start listening 25 (-1 msec)
Apr 18 08:50:26 pfSense unbound[1677]: [1677:3] debug: comm point listen_for_rw 25 0

w0w · Apr 19, 2023, 3:53 PM

I don't know why the timestamp in logs is broken, loglevel is 4. The log looks inconsistent and not full also, like it was interrupted and continiued.
I'm not sure if something in the log is wrong or out of the ordinary, so I don't have enough knowledge, but it looks like nothing happened except the time stamp is broken...

Apr 19 00:02:59 	unbound 	51656 	[51656:1] debug: comm point listen_for_rw 30 0
Apr 19 00:02:59 	unbound 	51656 	[51656:1] debug: comm point start listening 30 (-1 msec)
Apr 19 00:02:59 	unbound 	51656 	[51656:1] debug: the query is using TLS encryption, for dns.google
Apr 19 00:02:59 	unbound 	51656 	[51656:1] debug: tcp bound to src ip4 84.52.23.160 port 0 (len 16)
Apr 19 00:02:59 	unbound 	51656 	[51656:1] debug: serviced send timer
Apr 19 00:02:59 	unbound 	51656 	[51656:1] debug: cache memory msg=91674 rrset=125505 infra=7808 val=0
Apr 19 00:02:59 	unbound 	51656 	[51656:1] info: 0RDd mod1 rep feodotracker.abuse.ch. AAAA IN
Apr 19 00:02:59 	unbound 	51656 	[51656:1] info: mesh_run: end 1 recursion states (1 with reply, 0 detached), 1 waiting replies, 0 recursion replies sent, 0 replies dropped, 0 states jostled out
Apr 19 00:02:59 	unbound 	51656 	[51656:1] debug: mesh_run: iterator module exit state is module_wait_reply
Apr 19 00:02:59 	unbound 	51656 	[51656:1] debug: dnssec status: not expected
Apr 19 00:02:59 	unbound 	51656 	[51656:1] debug: sending to target: <.> 8.8.8.8#853
Apr 19 00:02:59 	unbound 	51656 	[51656:1] info: sending query: p2.shared.global.fastly.net. AAAA IN
Apr 19 00:02:59 	unbound 	51656 	[51656:1] debug: selrtt 376
Apr 19 00:02:59 	unbound 	51656 	[51656:1] debug: rpz: iterator module callback: have_rpz=0
Apr 19 00:02:59 	unbound 	51656 	[51656:1] debug: attempt to get extra 3 targets
Apr 19 00:02:59 	unbound 	51656 	[51656:1] debug: [cloudflare-dns.com] ip4 1.1.1.1 port 853 (len 16)
Apr 19 00:02:59 	unbound 	51656 	[51656:1] debug: [cloudflare-dns.com] ip6 2606:4700:4700::1111 port 853 (len 28)
Apr 19 00:02:59 	unbound 	51656 	[51656:1] debug: [cloudflare-dns.com] ip6 2606:4700:4700::1001 port 853 (len 28)
Apr 19 00:02:59 	unbound 	51656 	[51656:1] debug: [cloudflare-dns.com] ip4 1.0.0.1 port 853 (len 16)
Apr 19 00:02:59 	unbound 	51656 	[51656:1] debug: [dns.google] ip4 8.8.8.8 port 853 (len 16)
Apr 19 00:02:59 	unbound 	51656 	[51656:1] debug: [dns.google] ip4 8.8.4.4 port 853 (len 16)
Apr 19 00:02:59 	unbound 	51656 	[51656:1] debug: [dns.google] ip6 2001:4860:4860::8888 port 853 (len 28)
Apr 19 00:02:59 	unbound 	51656 	[51656:1] debug: [dns.google] ip6 2001:4860:4860::8844 port 853 (len 28)
Apr 19 00:02:59 	unbound 	51656 	[51656:1] info: DelegationPoint<.>: 0 names (0 missing), 8 addrs (0 result, 8 avail) parentNS
Apr 19 00:02:59 	unbound 	51656 	[51656:1] debug: processQueryTargets: targetqueries 0, currentqueries 0 sentcount 0
Apr 19 00:02:59 	unbound 	51656 	[51656:1] info: processQueryTargets: feodotracker.abuse.ch. AAAA IN
Apr 19 00:02:59 	unbound 	51656 	[51656:1] debug: iter_handle processing q with state QUERY TARGETS STATE
Apr 19 00:02:59 	unbound 	51656 	[51656:1] debug: forwarding request
Apr 19 00:02:59 	unbound 	51656 	[51656:1] debug: request has dependency depth of 0
Apr 19 00:02:59 	unbound 	51656 	[51656:1] info: resolving feodotracker.abuse.ch. AAAA IN
Apr 19 00:02:59 	unbound 	51656 	[51656:1] debug: iter_handle processing q with state INIT REQUEST STATE
Apr 19 00:02:59 	unbound 	51656 	[51656:1] debug: returning CNAME response from cache
Apr 19 00:02:59 	unbound 	51656 	[51656:1] debug: msg ttl is 1026, prefetch ttl 924
Apr 19 00:02:59 	unbound 	51656 	[51656:1] info: msg from cache lookup ;; ->>HEADER<<- opcode: QUERY, rcode: NOERROR, id: 0 ;; flags: qr ; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: feodotracker.abuse.ch. IN AAAA ;; ANSWER SECTION: feodotracker.abuse.ch. 1026 IN CNAME p2.shared.global.fastly.net. feodotracker.abuse.ch. 1026 IN RRSIG CNAME 5 3 60 20230504155253 20230404155253 12765 abuse.ch. N2C1reBZgD3r15ldnR/wDqmbYumI2kEgDGvbTqCgWKsa82Ds9TZUN/T4SlUmC5W6HsGD7QyZZHTjygXwlDETvnhImYl9SDZgtePRinjnfjinFthzcpTVEVGxtXCLIYOqCATAUwZotkKGtUE1u4aVqkArtSADJYpnk+MQPuYmrS7FEPxILrwoSDFryA8Lpdv3ut3+UzATfqbrB7W+P5qYdel/ODEjJozdOkK2PrmhiYp2uHXj5qicxZiPMuytjKhMmLwXBXQlNA4s2o4KFAYcHf7X4M+W3H/JFoCHIRfl28yZPqcWY6mjAkLpxa2SVcFI39zadQyf513ed+LMsFypng== ;{id = 12765} feodotracker.abuse.ch. 1026 IN RRSIG CNAME 14 3 60 20230514214831 20230414214831 45114 abuse.ch. RHzCfLewwoSmpqmk5cwhrG7bOiAP0HHpAx3AP/R0iUBAsaeF6ISc7/Nz/nIq+w6luZX9vypQgACpR++woKFWQO/+/M6cBBWkJN1HAMl14qNZ0brKxvNaBFRE4eN5Caog ;{id = 45114} ;; AUTHORITY SECTION: ;; ADDITIONAL SECTION: ;; MSG SIZE rcvd: 512
Apr 19 00:02:59 	unbound 	51656 	[51656:1] debug: request has dependency depth of 0
Apr 19 00:02:59 	unbound 	51656 	[51656:1] info: resolving feodotracker.abuse.ch. AAAA IN
Apr 19 00:02:59 	unbound 	51656 	[51656:1] debug: iter_handle processing q with state INIT REQUEST STATE
Apr 19 00:02:59 	unbound 	51656 	[51656:1] debug: process_request: new external request event
Apr 19 00:02:59 	unbound 	51656 	[51656:1] debug: iterator[module 1] operate: extstate:module_state_initial event:module_event_pass
Apr 19 00:02:59 	unbound 	51656 	[51656:1] debug: mesh_run: python module exit state is module_wait_module
Apr 19 00:02:59 	unbound 	51656 	[51656:1] debug: mesh_run: start
Apr 19 00:02:59 	unbound 	51656 	[51656:1] info: receive_udp on interface: 127.0.0.1
Apr 19 00:02:59 	unbound 	51656 	[51656:2] info: send_udp over interface: 127.0.0.1
Apr 19 00:02:59 	unbound 	51656 	[51656:2] info: receive_udp on interface: 127.0.0.1
Apr 19 00:02:59 	unbound 	51656 	[51656:2] info: send_udp over interface: 192.168.77.5
Apr 19 00:02:59 	unbound 	51656 	[51656:2] info: receive_udp on interface: 192.168.77.5
Apr 19 00:02:59 	unbound 	51656 	[51656:0] info: send_udp over interface: 192.168.77.5
Apr 19 00:02:59 	unbound 	51656 	[51656:0] info: receive_udp on interface: 192.168.77.5
Apr 19 00:02:57 	unbound 	51656 	[51656:0] debug: close fd 30
Apr 19 00:02:57 	unbound 	51656 	[51656:0] debug: remote control operation completed
Apr 19 00:02:57 	unbound 	51656 	[51656:0] info: control cmd: load_cache
Apr 19 00:02:57 	unbound 	51656 	[51656:0] debug: remote control connection authenticated
Apr 19 00:02:57 	unbound 	51656 	[51656:0] debug: comm point start listening 30 (120000 msec)
Apr 19 00:02:57 	unbound 	51656 	[51656:0] debug: comm point stop listening 30
Apr 19 00:02:57 	unbound 	51656 	[51656:0] debug: new control connection from ip4 127.0.0.1 port 34952 (len 16)
Apr 19 00:02:57 	unbound 	51656 	[51656:0] debug: close fd 30
Apr 19 00:02:57 	unbound 	51656 	[51656:0] debug: remote control operation completed
Apr 19 00:02:57 	unbound 	51656 	[51656:0] info: control cmd: status
Apr 19 00:02:57 	unbound 	51656 	[51656:0] debug: remote control connection authenticated
Apr 19 00:02:57 	unbound 	51656 	[51656:2] debug: cache memory msg=66072 rrset=66072 infra=7808 val=0
Apr 19 00:02:57 	unbound 	51656 	[51656:2] debug: no config, using builtin root hints.
Apr 19 00:02:57 	unbound 	51656 	[51656:1] debug: cache memory msg=66072 rrset=66072 infra=7808 val=0
Apr 19 00:02:57 	unbound 	51656 	[51656:1] debug: no config, using builtin root hints.
Apr 19 00:02:57 	unbound 	51656 	[51656:2] debug: [dns.google] ip6 2001:4860:4860::8844 port 853 (len 28)
Apr 19 00:02:57 	unbound 	51656 	[51656:2] debug: [dns.google] ip6 2001:4860:4860::8888 port 853 (len 28)
Apr 19 00:02:57 	unbound 	51656 	[51656:2] debug: [dns.google] ip4 8.8.4.4 port 853 (len 16)
Apr 19 00:02:57 	unbound 	51656 	[51656:2] debug: [dns.google] ip4 8.8.8.8 port 853 (len 16)
Apr 19 00:02:57 	unbound 	51656 	[51656:2] debug: [cloudflare-dns.com] ip4 1.0.0.1 port 853 (len 16)
Apr 19 00:02:57 	unbound 	51656 	[51656:2] debug: [cloudflare-dns.com] ip6 2606:4700:4700::1001 port 853 (len 28)
Apr 19 00:02:57 	unbound 	51656 	[51656:2] debug: [cloudflare-dns.com] ip6 2606:4700:4700::1111 port 853 (len 28)
Apr 19 00:02:57 	unbound 	51656 	[51656:2] debug: [cloudflare-dns.com] ip4 1.1.1.1 port 853 (len 16)
Apr 19 00:02:57 	unbound 	51656 	[51656:2] info: DelegationPoint<.>: 0 names (0 missing), 8 addrs (0 result, 8 avail) parentNS
Apr 19 00:02:57 	unbound 	51656 	[51656:2] debug: Forward zone server list:
Apr 19 00:02:57 	unbound 	51656 	[51656:1] debug: [dns.google] ip6 2001:4860:4860::8844 port 853 (len 28)
Apr 19 00:02:57 	unbound 	51656 	[51656:1] debug: [dns.google] ip6 2001:4860:4860::8888 port 853 (len 28)
Apr 19 00:02:57 	unbound 	51656 	[51656:1] debug: [dns.google] ip4 8.8.4.4 port 853 (len 16)
Apr 19 00:02:57 	unbound 	51656 	[51656:1] debug: [dns.google] ip4 8.8.8.8 port 853 (len 16)
Apr 19 00:02:57 	unbound 	51656 	[51656:1] debug: [cloudflare-dns.com] ip4 1.0.0.1 port 853 (len 16)
Apr 19 00:02:57 	unbound 	51656 	[51656:1] debug: [cloudflare-dns.com] ip6 2606:4700:4700::1001 port 853 (len 28)
Apr 19 00:02:57 	unbound 	51656 	[51656:1] debug: [cloudflare-dns.com] ip6 2606:4700:4700::1111 port 853 (len 28)
Apr 19 00:02:57 	unbound 	51656 	[51656:3] debug: cache memory msg=66072 rrset=66072 infra=7808 val=0
Apr 19 00:02:57 	unbound 	51656 	[51656:3] debug: no config, using builtin root hints.
Apr 19 00:02:57 	unbound 	51656 	[51656:3] debug: [dns.google] ip6 2001:4860:4860::8844 port 853 (len 28)
Apr 19 00:02:57 	unbound 	51656 	[51656:3] debug: [dns.google] ip6 2001:4860:4860::8888 port 853 (len 28)
Apr 19 00:02:57 	unbound 	51656 	[51656:3] debug: [dns.google] ip4 8.8.4.4 port 853 (len 16)
Apr 19 00:02:57 	unbound 	51656 	[51656:3] debug: [dns.google] ip4 8.8.8.8 port 853 (len 16)
Apr 19 00:02:57 	unbound 	51656 	[51656:3] debug: [cloudflare-dns.com] ip4 1.0.0.1 port 853 (len 16)
Apr 19 00:02:57 	unbound 	51656 	[51656:3] debug: [cloudflare-dns.com] ip6 2606:4700:4700::1001 port 853 (len 28)
Apr 19 00:02:57 	unbound 	51656 	[51656:3] debug: [cloudflare-dns.com] ip6 2606:4700:4700::1111 port 853 (len 28)
Apr 19 00:02:57 	unbound 	51656 	[51656:3] debug: [cloudflare-dns.com] ip4 1.1.1.1 port 853 (len 16)
Apr 19 00:02:57 	unbound 	51656 	[51656:3] info: DelegationPoint<.>: 0 names (0 missing), 8 addrs (0 result, 8 avail) parentNS
Apr 19 00:02:57 	unbound 	51656 	[51656:3] debug: Forward zone server list:
Apr 19 00:02:57 	unbound 	51656 	[51656:1] debug: [cloudflare-dns.com] ip4 1.1.1.1 port 853 (len 16)
Apr 19 00:02:57 	unbound 	51656 	[51656:1] info: DelegationPoint<.>: 0 names (0 missing), 8 addrs (0 result, 8 avail) parentNS
Apr 19 00:02:57 	unbound 	51656 	[51656:1] debug: Forward zone server list:
Apr 19 00:02:57 	unbound 	51656 	[51656:0] debug: comm point start listening 30 (120000 msec)
Apr 19 00:02:57 	unbound 	51656 	[51656:0] debug: comm point stop listening 30
Apr 19 00:02:57 	unbound 	51656 	[51656:0] debug: new control connection from ip4 127.0.0.1 port 31664 (len 16)
Apr 19 00:02:57 	unbound 	51656 	[51656:0] info: start of service (unbound 1.17.1).
Apr 19 00:02:57 	unbound 	51656 	[51656:0] debug: cache memory msg=66072 rrset=66072 infra=7808 val=0
Apr 19 00:02:57 	unbound 	51656 	[51656:0] debug: no config, using builtin root hints.
Apr 19 00:02:57 	unbound 	51656 	[51656:0] debug: [dns.google] ip6 2001:4860:4860::8844 port 853 (len 28)
Apr 19 00:02:57 	unbound 	51656 	[51656:0] debug: [dns.google] ip6 2001:4860:4860::8888 port 853 (len 28)
Apr 19 00:02:57 	unbound 	51656 	[51656:0] debug: [dns.google] ip4 8.8.4.4 port 853 (len 16)
Apr 19 00:02:57 	unbound 	51656 	[51656:0] debug: [dns.google] ip4 8.8.8.8 port 853 (len 16)
Apr 19 00:02:57 	unbound 	51656 	[51656:0] debug: [cloudflare-dns.com] ip4 1.0.0.1 port 853 (len 16)
Apr 19 00:02:57 	unbound 	51656 	[51656:0] debug: [cloudflare-dns.com] ip6 2606:4700:4700::1001 port 853 (len 28)
Apr 19 00:02:57 	unbound 	51656 	[51656:0] debug: [cloudflare-dns.com] ip6 2606:4700:4700::1111 port 853 (len 28)
Apr 19 00:02:57 	unbound 	51656 	[51656:0] debug: [cloudflare-dns.com] ip4 1.1.1.1 port 853 (len 16)
Apr 19 00:02:57 	unbound 	51656 	[51656:0] info: DelegationPoint<.>: 0 names (0 missing), 8 addrs (0 result, 8 avail) parentNS
Apr 19 00:02:57 	unbound 	51656 	[51656:0] debug: Forward zone server list:
Apr 19 00:02:57 	unbound 	51656 	[51656:3] debug: libevent 2.1.12-stable uses kqueue method.
Apr 19 00:02:57 	unbound 	51656 	[51656:2] debug: libevent 2.1.12-stable uses kqueue method.
Apr 19 00:02:57 	unbound 	51656 	[51656:1] debug: libevent 2.1.12-stable uses kqueue method.
Apr 19 00:02:57 	unbound 	51656 	[51656:0] debug: libevent 2.1.12-stable uses kqueue method.
Apr 19 00:02:57 	unbound 	51656 	[51656:0] debug: start threads
Apr 19 00:02:57 	unbound 	51656 	[51656:0] debug: total of 59448 outgoing ports available
Apr 19 00:02:57 	unbound 	51656 	[51656:0] debug: donotq: ::1
Apr 19 00:02:57 	unbound 	51656 	[51656:0] debug: donotq: 127.0.0.0/8
Apr 19 00:02:57 	unbound 	51656 	[51656:0] debug: target fetch policy for level 4 is 0
Apr 19 00:02:57 	unbound 	51656 	[51656:0] debug: target fetch policy for level 3 is 0
Apr 19 00:02:57 	unbound 	51656 	[51656:0] debug: target fetch policy for level 2 is 1
Apr 19 00:02:57 	unbound 	51656 	[51656:0] debug: target fetch policy for level 1 is 2
Apr 19 00:02:57 	unbound 	51656 	[51656:0] debug: target fetch policy for level 0 is 3
Apr 19 00:02:57 	unbound 	51656 	[51656:0] notice: init module 1: iterator
Apr 19 00:02:57 	unbound 	51656 	[51656:0] info: [pfBlockerNG]: init_standard script loaded
Apr 19 00:02:53 	unbound 	51656 	[51656:0] info: [pfBlockerNG]: pfb_unbound.py script loaded
Apr 19 00:02:53 	unbound 	51656 	[51656:0] notice: init module 0: python
Apr 19 00:02:53 	unbound 	51656 	[51656:0] debug: module config: "python iterator"
Apr 19 00:02:53 	unbound 	51656 	[51656:0] debug: ignoring duplicate RR: localhost. A 127.0.0.1
Apr 19 00:02:53 	unbound 	51656 	[51656:0] debug: ignoring duplicate RR: localhost. AAAA ::1
Apr 19 00:02:53 	unbound 	51656 	[51656:0] info: implicit transparent local-zone int. TYPE0 IN
Apr 19 00:02:53 	unbound 	51656 	[51656:0] debug: duplicate acl address ignored.
Apr 19 00:02:53 	unbound 	51656 	[51656:0] debug: drop user privileges, run as unbound
Apr 19 00:02:53 	unbound 	51656 	[51656:0] debug: chroot to /var/unbound
Apr 19 00:02:53 	unbound 	51656 	[51656:0] debug: chdir to /var/unbound
Apr 18 19:01:42 	unbound 	72249 	[72249:1] debug: comm point listen_for_rw 31 0
Apr 18 19:01:42 	unbound 	72249 	[72249:1] debug: comm point start listening 31 (-1 msec)
Apr 18 19:01:42 	unbound 	72249 	[72249:1] debug: the query is using TLS encryption, for cloudflare-dns.com
Apr 18 19:01:42 	unbound 	72249 	[72249:1] debug: tcp bound to src ip6 2001:470:27:191::2 port 0 (len 28)
Apr 18 19:01:42 	unbound 	72249 	[72249:1] debug: serviced send timer
Apr 18 19:01:42 	unbound 	72249 	[72249:1] debug: cache memory msg=118707 rrset=173008 infra=7808 val=0
Apr 18 19:01:42 	unbound 	72249 	[72249:1] info: 0RDd mod1 rep feodotracker.abuse.ch. AAAA IN
Apr 18 19:01:42 	unbound 	72249 	[72249:1] info: mesh_run: end 1 recursion states (1 with reply, 0 detached), 1 waiting replies, 0 recursion replies sent, 0 replies dropped, 0 states jostled out
Apr 18 19:01:42 	unbound 	72249 	[72249:1] debug: mesh_run: iterator module exit state is module_wait_reply
Apr 18 19:01:42 	unbound 	72249 	[72249:1] debug: dnssec status: not expected
Apr 18 19:01:42 	unbound 	72249 	[72249:1] debug: sending to target: <.> 2606:4700:4700::1111#853
Apr 18 19:01:42 	unbound 	72249 	[72249:1] info: sending query: p2.shared.global.fastly.net. AAAA IN
Apr 18 19:01:42 	unbound 	72249 	[72249:1] debug: selrtt 376
Apr 18 19:01:42 	unbound 	72249 	[72249:1] debug: rpz: iterator module callback: have_rpz=0
Apr 18 19:01:42 	unbound 	72249 	[72249:1] debug: attempt to get extra 3 targets
Apr 18 19:01:42 	unbound 	72249 	[72249:1] debug: [cloudflare-dns.com] ip4 1.1.1.1 port 853 (len 16)
Apr 18 19:01:42 	unbound 	72249 	[72249:1] debug: [cloudflare-dns.com] ip6 2606:4700:4700::1111 port 853 (len 28)
Apr 18 19:01:42 	unbound 	72249 	[72249:1] debug: [cloudflare-dns.com] ip6 2606:4700:4700::1001 port 853 (len 28)
Apr 18 19:01:42 	unbound 	72249 	[72249:1] debug: [cloudflare-dns.com] ip4 1.0.0.1 port 853 (len 16)
Apr 18 19:01:42 	unbound 	72249 	[72249:1] debug: [dns.google] ip4 8.8.8.8 port 853 (len 16)
Apr 18 19:01:42 	unbound 	72249 	[72249:1] debug: [dns.google] ip4 8.8.4.4 port 853 (len 16)
Apr 18 19:01:42 	unbound 	72249 	[72249:1] debug: [dns.google] ip6 2001:4860:4860::8888 port 853 (len 28)
Apr 18 19:01:42 	unbound 	72249 	[72249:1] debug: [dns.google] ip6 2001:4860:4860::8844 port 853 (len 28)
Apr 18 19:01:42 	unbound 	72249 	[72249:1] info: DelegationPoint<.>: 0 names (0 missing), 8 addrs (0 result, 8 avail) parentNS
Apr 18 19:01:42 	unbound 	72249 	[72249:1] debug: processQueryTargets: targetqueries 0, currentqueries 0 sentcount 0
Apr 18 19:01:42 	unbound 	72249 	[72249:1] info: processQueryTargets: feodotracker.abuse.ch. AAAA IN
Apr 18 19:01:42 	unbound 	72249 	[72249:1] debug: iter_handle processing q with state QUERY TARGETS STATE
Apr 18 19:01:42 	unbound 	72249 	[72249:1] debug: forwarding request
Apr 18 19:01:42 	unbound 	72249 	[72249:1] debug: request has dependency depth of 0
Apr 18 19:01:42 	unbound 	72249 	[72249:1] info: resolving feodotracker.abuse.ch. AAAA IN
Apr 18 19:01:42 	unbound 	72249 	[72249:1] debug: iter_handle processing q with state INIT REQUEST STATE
Apr 18 19:01:42 	unbound 	72249 	[72249:1] debug: returning CNAME response from cache
Apr 18 19:01:42 	unbound 	72249 	[72249:1] debug: msg ttl is 1103, prefetch ttl 993
Apr 18 19:01:42 	unbound 	72249 	[72249:1] info: msg from cache lookup ;; ->>HEADER<<- opcode: QUERY, rcode: NOERROR, id: 0 ;; flags: qr ; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: feodotracker.abuse.ch. IN AAAA ;; ANSWER SECTION: feodotracker.abuse.ch. 1103 IN CNAME p2.shared.global.fastly.net. feodotracker.abuse.ch. 1103 IN RRSIG CNAME 5 3 60 20230504155253 20230404155253 12765 abuse.ch. N2C1reBZgD3r15ldnR/wDqmbYumI2kEgDGvbTqCgWKsa82Ds9TZUN/T4SlUmC5W6HsGD7QyNNHTjygXwlDETvnhImYl9SDZgtePRinjnfjinFthzcpTVEVGxtXCLIYOqCATAUwZotkKGtUE1u4aVqkArtSADJYpnk+MQPuYmrS7FEPxILrwoSDFryA8Lpdv3ut3+UzATfqbrB7W+P5qYdel/ODEjJozdOkK2PrmhiYp2uHXj5qicxZiPMuytjKVVmLwXBXQlNA4s2o4KFAYcHf7X4M+W3H/JFoCHIRfl28yZPqcWY6mjAkLpxa2SVcFI39zadQyf513ed+LMsFypng== ;{id = 12765} feodotracker.abuse.ch. 1103 IN RRSIG CNAME 14 3 60 20230514214831 20230414214831 45114 abuse.ch. RHzCfLewwoSmpqmk5cwhrG7bOiAP0HHpAx3AP/R0iUBAsaeF6ISc7/Nz/nIq+w6luZX9vypQgACpR++woKFWQO/+/M6cBBWkJN1HAMl14qNZ0brKxvNaBFRE4eN5Caog ;{id = 45114} ;; AUTHORITY SECTION: ;; ADDITIONAL SECTION: ;; MSG SIZE rcvd: 512
Apr 18 19:01:42 	unbound 	72249 	[72249:1] debug: request has dependency depth of 0
Apr 18 19:01:42 	unbound 	72249 	[72249:1] info: resolving feodotracker.abuse.ch. AAAA IN
Apr 18 19:01:42 	unbound 	72249 	[72249:1] debug: iter_handle processing q with state INIT REQUEST STATE
Apr 18 19:01:42 	unbound 	72249 	[72249:1] debug: process_request: new external request event
Apr 18 19:01:42 	unbound 	72249 	[72249:1] debug: iterator[module 1] operate: extstate:module_state_initial event:module_event_pass
Apr 18 19:01:42 	unbound 	72249 	[72249:1] debug: mesh_run: python module exit state is module_wait_module
Apr 18 19:01:42 	unbound 	72249 	[72249:1] debug: mesh_run: start
Apr 18 19:01:42 	unbound 	72249 	[72249:1] info: receive_udp on interface: 127.0.0.1
Apr 18 19:01:42 	unbound 	72249 	[72249:1] info: send_udp over interface: 127.0.0.1
Apr 18 19:01:42 	unbound 	72249 	[72249:1] info: receive_udp on interface: 127.0.0.1
Apr 18 19:01:41 	unbound 	72249 	[72249:3] debug: comm point start listening 30 (30000 msec)
Apr 18 19:01:41 	unbound 	72249 	[72249:3] debug: comm point stop listening 30
Apr 18 19:01:41 	unbound 	72249 	[72249:3] debug: comm point start listening 30 (30000 msec)
Apr 18 19:01:41 	unbound 	72249 	[72249:3] debug: comm point stop listening 30
Apr 18 19:01:41 	unbound 	72249 	[72249:3] debug: using localzone xxxnetxxx. static
Apr 18 19:01:41 	unbound 	72249 	[72249:3] debug: Reading ssl tcp query of length 128
Apr 18 19:01:41 	unbound 	72249 	[72249:3] debug: comm point start listening 30 (30000 msec)
Apr 18 19:01:41 	unbound 	72249 	[72249:3] debug: comm point stop listening 30
Apr 18 19:01:41 	unbound 	72249 	[72249:3] debug: comm point start listening 30 (30000 msec)
Apr 18 19:01:41 	unbound 	72249 	[72249:3] debug: comm point stop listening 30
Apr 18 19:01:41 	unbound 	72249 	[72249:3] debug: using localzone xxxnetxxx. static
Apr 18 19:01:41 	unbound 	72249 	[72249:3] debug: Reading ssl tcp query of length 128
Apr 18 19:01:41 	unbound 	72249 	[72249:3] debug: SSL connection ip4 192.168.77.156 port 38692 (len 16)
Apr 18 19:01:41 	unbound 	72249 	[72249:3] debug: comm point start listening 30 (30000 msec)
Apr 18 19:01:40 	unbound 	72249 	[72249:0] debug: close fd 30
Apr 18 19:01:40 	unbound 	72249 	[72249:0] debug: remote control operation completed
Apr 18 19:01:40 	unbound 	72249 	[72249:0] info: control cmd: load_cache
Apr 18 19:01:40 	unbound 	72249 	[72249:0] debug: remote control connection authenticated
Apr 18 19:01:40 	unbound 	72249 	[72249:0] debug: comm point start listening 30 (120000 msec)
Apr 18 19:01:40 	unbound 	72249 	[72249:0] debug: comm point stop listening 30
Apr 18 19:01:40 	unbound 	72249 	[72249:0] debug: new control connection from ip4 127.0.0.1 port 8654 (len 16)
Apr 18 19:01:40 	unbound 	72249 	[72249:0] debug: close fd 30
Apr 18 19:01:40 	unbound 	72249 	[72249:0] debug: remote control operation completed
Apr 18 19:01:40 	unbound 	72249 	[72249:0] info: control cmd: status
Apr 18 19:01:40 	unbound 	72249 	[72249:0] debug: remote control connection authenticated
Apr 18 19:01:40 	unbound 	72249 	[72249:3] debug: cache memory msg=66072 rrset=66072 infra=7808 val=0
Apr 18 19:01:40 	unbound 	72249 	[72249:3] debug: no config, using builtin root hints.
Apr 18 19:01:40 	unbound 	72249 	[72249:3] debug: [dns.google] ip6 2001:4860:4860::8844 port 853 (len 28)
Apr 18 19:01:40 	unbound 	72249 	[72249:3] debug: [dns.google] ip6 2001:4860:4860::8888 port 853 (len 28)
Apr 18 19:01:40 	unbound 	72249 	[72249:3] debug: [dns.google] ip4 8.8.4.4 port 853 (len 16)
Apr 18 19:01:40 	unbound 	72249 	[72249:3] debug: [dns.google] ip4 8.8.8.8 port 853 (len 16)
Apr 18 19:01:40 	unbound 	72249 	[72249:3] debug: [cloudflare-dns.com] ip4 1.0.0.1 port 853 (len 16)
Apr 18 19:01:40 	unbound 	72249 	[72249:3] debug: [cloudflare-dns.com] ip6 2606:4700:4700::1001 port 853 (len 28)
Apr 18 19:01:40 	unbound 	72249 	[72249:3] debug: [cloudflare-dns.com] ip6 2606:4700:4700::1111 port 853 (len 28)
Apr 18 19:01:40 	unbound 	72249 	[72249:3] debug: [cloudflare-dns.com] ip4 1.1.1.1 port 853 (len 16)
Apr 18 19:01:40 	unbound 	72249 	[72249:3] info: DelegationPoint<.>: 0 names (0 missing), 8 addrs (0 result, 8 avail) parentNS
Apr 18 19:01:40 	unbound 	72249 	[72249:3] debug: Forward zone server list:
Apr 18 19:01:40 	unbound 	72249 	[72249:1] debug: cache memory msg=66072 rrset=66072 infra=7808 val=0
Apr 18 19:01:40 	unbound 	72249 	[72249:1] debug: no config, using builtin root hints.
Apr 18 19:01:40 	unbound 	72249 	[72249:1] debug: [dns.google] ip6 2001:4860:4860::8844 port 853 (len 28)
Apr 18 19:01:40 	unbound 	72249 	[72249:1] debug: [dns.google] ip6 2001:4860:4860::8888 port 853 (len 28)
Apr 18 19:01:40 	unbound 	72249 	[72249:1] debug: [dns.google] ip4 8.8.4.4 port 853 (len 16)
Apr 18 19:01:40 	unbound 	72249 	[72249:1] debug: [dns.google] ip4 8.8.8.8 port 853 (len 16)
Apr 18 19:01:40 	unbound 	72249 	[72249:1] debug: [cloudflare-dns.com] ip4 1.0.0.1 port 853 (len 16)
Apr 18 19:01:40 	unbound 	72249 	[72249:1] debug: [cloudflare-dns.com] ip6 2606:4700:4700::1001 port 853 (len 28)
Apr 18 19:01:40 	unbound 	72249 	[72249:1] debug: [cloudflare-dns.com] ip6 2606:4700:4700::1111 port 853 (len 28)
Apr 18 19:01:40 	unbound 	72249 	[72249:1] debug: [cloudflare-dns.com] ip4 1.1.1.1 port 853 (len 16)
Apr 18 19:01:40 	unbound 	72249 	[72249:1] info: DelegationPoint<.>: 0 names (0 missing), 8 addrs (0 result, 8 avail) parentNS
Apr 18 19:01:40 	unbound 	72249 	[72249:1] debug: Forward zone server list:
Apr 18 19:01:40 	unbound 	72249 	[72249:2] debug: cache memory msg=66072 rrset=66072 infra=7808 val=0
Apr 18 19:01:40 	unbound 	72249 	[72249:2] debug: no config, using builtin root hints.
Apr 18 19:01:40 	unbound 	72249 	[72249:2] debug: [dns.google] ip6 2001:4860:4860::8844 port 853 (len 28)
Apr 18 19:01:40 	unbound 	72249 	[72249:2] debug: [dns.google] ip6 2001:4860:4860::8888 port 853 (len 28)
Apr 18 19:01:40 	unbound 	72249 	[72249:2] debug: [dns.google] ip4 8.8.4.4 port 853 (len 16)
Apr 18 19:01:40 	unbound 	72249 	[72249:2] debug: [dns.google] ip4 8.8.8.8 port 853 (len 16)
Apr 18 19:01:40 	unbound 	72249 	[72249:2] debug: [cloudflare-dns.com] ip4 1.0.0.1 port 853 (len 16)
Apr 18 19:01:40 	unbound 	72249 	[72249:2] debug: [cloudflare-dns.com] ip6 2606:4700:4700::1001 port 853 (len 28)
Apr 18 19:01:40 	unbound 	72249 	[72249:2] debug: [cloudflare-dns.com] ip6 2606:4700:4700::1111 port 853 (len 28)
Apr 18 19:01:40 	unbound 	72249 	[72249:2] debug: [cloudflare-dns.com] ip4 1.1.1.1 port 853 (len 16)
Apr 18 19:01:40 	unbound 	72249 	[72249:2] info: DelegationPoint<.>: 0 names (0 missing), 8 addrs (0 result, 8 avail) parentNS
Apr 18 19:01:40 	unbound 	72249 	[72249:2] debug: Forward zone server list:
Apr 18 19:01:40 	unbound 	72249 	[72249:0] debug: comm point start listening 30 (120000 msec)
Apr 18 19:01:40 	unbound 	72249 	[72249:0] debug: comm point stop listening 30
Apr 18 19:01:40 	unbound 	72249 	[72249:0] debug: new control connection from ip4 127.0.0.1 port 61004 (len 16)
Apr 18 19:01:40 	unbound 	72249 	[72249:0] info: start of service (unbound 1.17.1).
Apr 18 19:01:40 	unbound 	72249 	[72249:0] debug: cache memory msg=66072 rrset=66072 infra=7808 val=0
Apr 18 19:01:40 	unbound 	72249 	[72249:0] debug: no config, using builtin root hints.
Apr 18 19:01:40 	unbound 	72249 	[72249:0] debug: [dns.google] ip6 2001:4860:4860::8844 port 853 (len 28)
Apr 18 19:01:40 	unbound 	72249 	[72249:0] debug: [dns.google] ip6 2001:4860:4860::8888 port 853 (len 28)
Apr 18 19:01:40 	unbound 	72249 	[72249:0] debug: [dns.google] ip4 8.8.4.4 port 853 (len 16)
Apr 18 19:01:40 	unbound 	72249 	[72249:0] debug: [dns.google] ip4 8.8.8.8 port 853 (len 16)
Apr 18 19:01:40 	unbound 	72249 	[72249:0] debug: [cloudflare-dns.com] ip4 1.0.0.1 port 853 (len 16)
Apr 18 19:01:40 	unbound 	72249 	[72249:0] debug: [cloudflare-dns.com] ip6 2606:4700:4700::1001 port 853 (len 28)
Apr 18 19:01:40 	unbound 	72249 	[72249:0] debug: [cloudflare-dns.com] ip6 2606:4700:4700::1111 port 853 (len 28)
Apr 18 19:01:40 	unbound 	72249 	[72249:0] debug: [cloudflare-dns.com] ip4 1.1.1.1 port 853 (len 16)
Apr 18 19:01:40 	unbound 	72249 	[72249:0] info: DelegationPoint<.>: 0 names (0 missing), 8 addrs (0 result, 8 avail) parentNS
Apr 18 19:01:40 	unbound 	72249 	[72249:0] debug: Forward zone server list:
Apr 18 19:01:40 	unbound 	72249 	[72249:1] debug: libevent 2.1.12-stable uses kqueue method.
Apr 18 19:01:40 	unbound 	72249 	[72249:2] debug: libevent 2.1.12-stable uses kqueue method.
Apr 18 19:01:40 	unbound 	72249 	[72249:3] debug: libevent 2.1.12-stable uses kqueue method.
Apr 18 19:01:40 	unbound 	72249 	[72249:0] debug: libevent 2.1.12-stable uses kqueue method.
Apr 18 19:01:40 	unbound 	72249 	[72249:0] debug: start threads
Apr 18 19:01:40 	unbound 	72249 	[72249:0] debug: total of 59448 outgoing ports available
Apr 18 19:01:40 	unbound 	72249 	[72249:0] debug: donotq: ::1
Apr 18 19:01:40 	unbound 	72249 	[72249:0] debug: donotq: 127.0.0.0/8
Apr 18 19:01:40 	unbound 	72249 	[72249:0] debug: target fetch policy for level 4 is 0
Apr 18 19:01:40 	unbound 	72249 	[72249:0] debug: target fetch policy for level 3 is 0
Apr 18 19:01:40 	unbound 	72249 	[72249:0] debug: target fetch policy for level 2 is 1
Apr 18 19:01:40 	unbound 	72249 	[72249:0] debug: target fetch policy for level 1 is 2
Apr 18 19:01:40 	unbound 	72249 	[72249:0] debug: target fetch policy for level 0 is 3
Apr 18 19:01:40 	unbound 	72249 	[72249:0] notice: init module 1: iterator
Apr 18 19:01:40 	unbound 	72249 	[72249:0] info: [pfBlockerNG]: init_standard script loaded
Apr 18 19:01:36 	unbound 	72249 	[72249:0] info: [pfBlockerNG]: pfb_unbound.py script loaded
Apr 18 19:01:36 	unbound 	72249 	[72249:0] notice: init module 0: python
Apr 18 19:01:36 	unbound 	72249 	[72249:0] debug: module config: "python iterator"
Apr 18 19:01:36 	unbound 	72249 	[72249:0] debug: ignoring duplicate RR: localhost. A 127.0.0.1
Apr 18 19:01:36 	unbound 	72249 	[72249:0] debug: ignoring duplicate RR: localhost. AAAA ::1
Apr 18 19:01:36 	unbound 	72249 	[72249:0] info: implicit transparent local-zone int. TYPE0 IN
Apr 18 19:01:36 	unbound 	72249 	[72249:0] debug: duplicate acl address ignored.
Apr 18 19:01:36 	unbound 	72249 	[72249:0] debug: drop user privileges, run as unbound
Apr 18 19:01:36 	unbound 	72249 	[72249:0] debug: chroot to /var/unbound
Apr 18 19:01:36 	unbound 	72249 	[72249:0] debug: chdir to /var/unbound

Jimbohello · Apr 21, 2023, 5:10 AM

@stephenw10

I found a new bug !

With version 23.01 i have only 50% of download bandwich ! Upload is ok 100%

I put back 22.05 and 2.6.0(community edition)
Download and upload reach 100%

Chelsio 520 on lan side
Intel pro nic on wan side

I mean that a weird bug
Maybe netgate should not code with a non existent freebsd 14 version mention « CURRENT » when it’s not even officially out as release date yet

https://www.freebsd.org/releng/
https://www.freebsd.org/releases/14.0R/schedule/

Maybe netgate pull out freebsd 14 from kinder suprise candy !

imo is based on freebsd release info

Thnk

So i stick to community for now

SteveITS · Apr 21, 2023, 5:58 AM

@jimbohello There are a few threads already for Chelsio.

https://forum.netgate.com/topic/177885/upgrade-to-23-01-wan-speed-halved/

https://forum.netgate.com/topic/177972/download-speeds-cut-in-half/

stephenw10 · Apr 21, 2023, 12:32 PM

Yup, that's a separate issue. But do you have a T520-SO by any chance?

Jimbohello · Apr 21, 2023, 2:51 PM

@stephenw10

em0@pci0:1:0:0:	class=0x020000 card=0xa01f8086 chip=0x10d38086 rev=0x00 hdr=0x00
    vendor     = 'Intel Corporation'
    device     = '82574L Gigabit Network Connection'
    class      = network
    subclass   = ethernet
t5iov0@pci0:2:0:0:	class=0x020000 card=0x00001425 chip=0x50011425 rev=0x00 hdr=0x00
    vendor     = 'Chelsio Communications Inc'
    device     = 'T520-CR Unified Wire Ethernet Controller'
    class      = network
    subclass   = ethernet
t5iov1@pci0:2:0:1:	class=0x020000 card=0x00001425 chip=0x50011425 rev=0x00 hdr=0x00
    vendor     = 'Chelsio Communications Inc'
    device     = 'T520-CR Unified Wire Ethernet Controller'
    class      = network
    subclass   = ethernet
t5iov2@pci0:2:0:2:	class=0x020000 card=0x00001425 chip=0x50011425 rev=0x00 hdr=0x00
    vendor     = 'Chelsio Communications Inc'
    device     = 'T520-CR Unified Wire Ethernet Controller'
    class      = network
    subclass   = ethernet
t5iov3@pci0:2:0:3:	class=0x020000 card=0x00001425 chip=0x50011425 rev=0x00 hdr=0x00
    vendor     = 'Chelsio Communications Inc'
    device     = 'T520-CR Unified Wire Ethernet Controller'
    class      = network
    subclass   = ethernet
t5nex0@pci0:2:0:4:	class=0x020000 card=0x00001425 chip=0x54011425 rev=0x00 hdr=0x00
    vendor     = 'Chelsio Communications Inc'
    device     = 'T520-CR Unified Wire Ethernet Controller'
    class      = network
    subclass   = ethernet

stephenw10 · Apr 21, 2023, 2:53 PM

Ok. Unfortunately it doesn't appear to affect the one Chelsio NIC I have available.
You could add that data point to the other thread.

w0w · Apr 30, 2023, 4:59 PM

It seems to me that this problem no longer appears on version 23.05

stephenw10 · Apr 30, 2023, 8:02 PM

Ah, well that would be a very interesting result. Can anyone else hitting this verify that?

defunct78 · May 4, 2023, 3:03 AM

Running the SG-1100, I have been fighting this problem for a while. I did notice the problem self resolved once I applied all the recommended patches on 23.01 and reboot. I have not gone in and attempted to figure out which one or combo fixes it, with a 1100 it is just too slow

Curious to know if this solution helps anyone else.

JonH · May 4, 2023, 4:29 AM

@defunct78 I'm running 23.01-Release on SG-5100. I'm still plagued with this issue and today I threw up my hands and reverted to port 53 and disabled python mode in both the resolver & pfBlocker.

I am now watching to see how my system responds.