So many config changes from WireGuard (and even more from pfBlocker if DNSBL is disabled)
-
@johnpoz Do you have anything in DNSBL Groups enabled or the other tabs?
Still wouldn't make any sense. -
@Bob-Dig nope have never setup dns-bl, have no use for it. Have never had it enabled ever..
-
@johnpoz I think one ad list is included by installation there, maybe removing it does something; or not.
-
@Bob-Dig I looked I have nothing selected.. Ah, this is set by default for top 1M whitelist
Default: COM, NET, ORG, CA, CO, IO
But can not unselect them.. if you do and then hit save, and then go back into it.. They are selected again, but this is not even enabled.
I have no groups listed
No categories selected, nothing in safesearch, its not enabled.. I don't use dns-bl, my clients use pihole on my network for this sort of thing.. The only thing I use pfblocker for is creating aliases I use in my own firewall rules.
-
@johnpoz I am quite happy with pfBlocker doing DNSBL, what am I missing? Seriously.
-
@Bob-Dig I have nothing against it, it prob works great.. But have been using pihole for like forever.. It works for me, its eyecandy is nicer and I know it inside and out.. I have no good reason to change..
But I do love the flexibility of creating aliases with pfblocker, and make use of them quite a bit.. But the blocking with dnsbl I don't have a current use for..
If I want filtered dns, I query my pihole, which in turn forwards to unbound on pfsense. If I want unfiltered I can just query unbound on pfsense directly.. I see no point in filtering in 2 different locations. Maybe I could move to just using pfblocker dnsbl - but then I would miss the eyecandy pihole provides. And would be more difficult to just query a filtered or unfiltered dns that I run locally, etc.
The alias rules I create in pfblocker, are only for inbound into my wan.. etc..
-
weird, I have the same problem with pfblockerNG.
DNSBL is disabled, using it in the same way as @johnpoz , just the IP part to create aliases.
-
@mcury yeah its a bit of annoyance... Lets see if enabling it and just not having anything configured makes it go away.. But to be honest I don't think that is going to work.. But happy to test it.. Will know tmrw.. since the cron kicks off every 12 hours.
Maybe we are the only 2 using pfblocker in this way? ;)
Yours is doing it every hour, which pretty much makes the ability to restore configs completely useless, since by time you might notice and need to restore a config you did yesterday it would be gone.. The default is like 30, so if every hour a new one is added, 30 hours later your actual config you changed would be gone.
-
@johnpoz said in So many config changes from WireGuard:
@mcury yeah its a bit of annoyance... Lets see if enabling it and just not having anything configured makes it go away.. But to be honest I don't think that is going to work.. But happy to test it.. Will know tmrw.. since the cron kicks off every 12 hours.
If there is something that I can do to help, just tell me.
I can set it up here to speed up the tests@johnpoz said in So many config changes from WireGuard:
Maybe we are the only 2 using pfblocker in this way? ;)
probably :) I'm using uBlock Origin, for me it is working perfectly fine.
dead on arrival, nowhere to be found.
-
@mcury all I did was enable it, but leave everything disabled or not configured.. You could try that since yours is doing it every hour, then in a couple hours we should be able to tell if that fixes the problem. If it does it would be really odd.
-
@johnpoz said in So many config changes from WireGuard:
@mcury all I did was enable it, but leave everything disabled or not configured.. You could try that since yours is doing it every hour, then in a couple hours we should be able to tell if that fixes the problem. If it does it would be really odd.
Enabled DNSBL and ran an update, it is up and running.
I'll be monitoring it and will report soon.DNSBL groups as per below:
dead on arrival, nowhere to be found.
-
@mcury said in So many config changes from WireGuard:
If there is something that I can do to help, just tell me.
Install WireGuard.
Btw Devel has bugs, nondevil is more up to date nowadays.
-
-
@Bob-Dig said in So many config changes from WireGuard:
@mcury said in So many config changes from WireGuard:
If there is something that I can do to help, just tell me.
Install WireGuard.
Wireguard is installed and enabled, but this problem is not happening with it, just with pfblockerNG
-
@mcury said in So many config changes from WireGuard:
Wireguard is installed and enabled, but this problem is not happening with it, just with pfblockerNG
WTF
-
Wireguard only does it at boot though and pfBlocker when a cronjob fires I think.
-
Oh nope! But it is triggered by a package restart. So your system may not show it.
-
Now I took a look at some other machines (CE) and I can confirm, it is only showing it, if DNSBL is disabled. But damn, this sucks even more than with WireGuard.
@mcury Your not seeing WireGuard because your pfBlocker is polluting it so much more.
-
@Bob-Dig said in So many config changes from WireGuard:
Your not seeing WireGuard because your pfBlocker is polluting it even more heavy.
You may be correct about that, I'm now monitoring it and if I see something new, I'll report it here.
-
Enabling DNSBL fixed the problem with it saving configs.
As soon as I can, I'll reboot the firewall to check if I can see Wireguard showing up there.
