unified.log referencing a deleted custom feed
-
August 22 13:41:13,1700000010,ix1,LAN,block,4,6,TCP-S,[local client address],1.1.1.1,59109,443,out,Unk,pfB_DoH_IP_v4,1.1.1.1,[DELETED CUSTOM FEED NAME],one.one.one.one,Unknown,|ASN:13335|Name:APNIC-LABS|Desc:APNIC and Cloudflare DNS Resolver Project|Prefix:1.1.1.0/24,+Where is the "
[DELETED CUSTOM FEED NAME]" logging value referenced from?This particular custom feed no longer exists anywhere for this pfB install—not in the list of Feeds nor anywhere in any of the file storage locations (i.e., /var/db/aliastables/..., /var/db/pfblocker/original/..., etc.)
-
CE 2.7.2 and pfBlockerNG-devel 3.2.0_8
-
@cyberconsultants the logs are managed by the settings in the General Tab. When you delete a feed, it doesn't clear the event history.
-
hey @BBcan177, thanks for the reply.
no, i mean the feed is long since completely deleted from the pfB instance, doesn't appear anywhere under the Feeds tab—but its name is somehow still being referenced by current logging.
that's why i'm trying to determine from where/what that specific field of the
unified.logis referencing. where i've indicated "[DELETED CUSTOM FEED NAME]" is where the completely deleted custom feed's old name is printed. (i.e., the 17th value/field of theunified.logline.)
