Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    DNS resolver exiting when loading pfblocker 25.03.b.20250409.2208

    Scheduled Pinned Locked Moved Plus 25.03 Develoment Snapshots
    66 Posts 3 Posters 3.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • stephenw10S
      stephenw10 Netgate Administrator
      last edited by

      I'm still unable to replicate this beyond that one time I hit it.

      Do you have steps to replicate? Does it still require pfBlocker?

      w0wW 1 Reply Last reply Reply Quote 0
      • w0wW
        w0w @stephenw10
        last edited by w0w

        @stephenw10
        I don't think it still requires pfBlocker. I guess pfBlocker was just the suspect, you know… the usual suspect. Plus, it constantly pokes Unbound, which probably makes things worse. The fact that the service stopped for you too suggests there’s some kind of race condition — like a bunch of start and stop requests hit Unbound at the same time, and it ends up not knowing what to do anymore.

        I'm not sure it's going to be that simple to emulate. The thing is, when I captured a pcap of my PPPoE traffic to look for RA packets, it turned out that my provider is sending them every 15-25 seconds or so for some reason. I'm honestly not sure if they’re sending them on their own or if it's because pfSense is also sending a hint, I didn’t have time to dig into it all.

        My setup is relatively complex: two WANs, WAN1 and WAN2, in FAILover mode, and all interfaces use LAGG for CARP compatibility. I think we can disregard all other factors, except for the fact that to reproduce this bug, PPPoE is required, and the server side should be sending RA-like informational messages to the PPPoE client — that is, the WAN interface — say, every 25 seconds?
        368844c5-9075-407e-9db4-738f44c5eabc-image.png

        9fcfdfe8-0620-4dc9-b3e3-8fe911193671-{531DC45E-6D1E-4A7A-93F2-1037989C7283}.png

        1 Reply Last reply Reply Quote 0
        • stephenw10S
          stephenw10 Netgate Administrator
          last edited by

          Mmm, I don't see any RA packets on my PPPoE WAN here. 🤔 Or at least not over a reasonable time.

          1 Reply Last reply Reply Quote 0
          • w0wW
            w0w
            last edited by w0w

            @stephenw10
            Is this what are we looking for?

            25.03.b.20250409.2208

            /var/etc/dhcp6c_wan_script.sh without 'Do not wait for a RA' enabled

            #!/bin/sh
            # This shell script launches /etc/rc.newwanipv6 with a interface argument.
            dmips=${new_domain_name_servers}
            dmnames=${new_domain_name}
            case $REASON in
            REBIND)
            ;;
            REQUEST|RELEASE)
            /usr/local/sbin/fcgicli -f /etc/rc.newwanipv6 -d "interface=pppoe0&dmnames=${dmnames}&dmips=${dmips}&reason=${REASON}"
            ;;
            RENEW|INFO)
            /usr/local/sbin/fcgicli -f /etc/rc.newwanipv6 -d "interface=pppoe0&dmnames=${dmnames}&dmips=${dmips}&reason=${REASON}"
            esac
            

            /var/etc/dhcp6c_wan_script.sh 'Do not wait for a RA' enabled

            #!/bin/sh
            # This shell script launches /etc/rc.newwanipv6 with a interface argument.
            dmips=$(cat "/tmp/pppoe0_domain_name_servers")
            dmnames=$(cat "/tmp/pppoe0_new_domain_name")
            /bin/sleep 1
            /usr/local/sbin/fcgicli -f /etc/rc.newwanipv6 -d "interface=pppoe0&dmnames=${dmnames}&dmips=${dmips}&reason=${REASON}"
            

            25.03.b.20250204.0023

            /var/etc/dhcp6c_wan_script.sh without 'Do not wait for a RA' enabled

            #!/bin/sh
            # This shell script launches /etc/rc.newwanipv6 with a interface argument.
            dmips=${new_domain_name_servers}
            dmnames=${new_domain_name}
            case $REASON in
            REBIND)
            ;;
            REQUEST|RELEASE)
            /usr/local/sbin/fcgicli -f /etc/rc.newwanipv6 -d "interface=pppoe0&dmnames=${dmnames}&dmips=${dmips}"
            ;;
            RENEW|INFO)
            esac
            
            

            /var/etc/dhcp6c_wan_script.sh 'Do not wait for a RA' enabled

            #!/bin/sh
            # This shell script launches /etc/rc.newwanipv6 with a interface argument.
            dmips=$(cat "/tmp/pppoe0_domain_name_servers")
            dmnames=$(cat "/tmp/pppoe0_new_domain_name")
            /bin/sleep 1
            /usr/local/sbin/fcgicli -f /etc/rc.newwanipv6 -d "interface=pppoe0&dmnames=${dmnames}&dmips=${dmips}"
            
            
            1 Reply Last reply Reply Quote 0
            • stephenw10S
              stephenw10 Netgate Administrator
              last edited by

              Yup could well be that.

              1 Reply Last reply Reply Quote 0
              • w0wW
                w0w
                last edited by

                Looks like 29 aprill beta fixed this behaviour.

                RobbieTTR 1 Reply Last reply Reply Quote 1
                • stephenw10S
                  stephenw10 Netgate Administrator
                  last edited by

                  Interesting. I believe there are still some edge cases there that can trigger it. We are still working on resolving it completely.

                  w0wW 1 Reply Last reply Reply Quote 0
                  • w0wW
                    w0w @stephenw10
                    last edited by

                    @stephenw10
                    Sure. But it looks much better then 27. April build, so definitely there's some progress.

                    1 Reply Last reply Reply Quote 1
                    • w0wW w0w referenced this topic on
                    • RobbieTTR
                      RobbieTT @w0w
                      last edited by

                      @stephenw10

                      I'm on a later build now but still have the issue where different services are triggered to restart for no understandable reason. pfBlocker NG (of course), Avahi, unbound (to the point that my cache is almost always cold and even the histogram has few entries) plus NTP.

                      I'm also getting spurious 'hotplug' events on the LAN side (even VLANs) and these in turn also cause services to restart plus the (very few) RAs my ISP sends out triggers a change even though the established IPv4 and IPv6 details remain unchanged. It's like everything is on a hair-trigger to restart and sometimes it is like a cascade. Other times pfSense can tick along for many hours with nothing troubling the logs.

                      
                      Last 500 General Log Entries. (Maximum 500)
                      Time	Process	PID	Message
                      
                      May 15 16:10:20	nginx		2025/05/15 16:10:20 [error] 46201#100603: *12017 open() "/usr/local/www/apple-touch-icon.png" failed (2: No such file or directory), client: xxxx.xxx.xxx:1:d487:e82a:32e7:abed, server: , request: "GET /apple-touch-icon.png HTTP/2.0", host: "router-7.xxxxxxxx.me:8443"
                      May 15 16:10:20	nginx		2025/05/15 16:10:20 [error] 46201#100603: *12017 open() "/usr/local/www/apple-touch-icon-precomposed.png" failed (2: No such file or directory), client: xxxx.xxx.xxx:1:d487:e82a:32e7:abed, server: , request: "GET /apple-touch-icon-precomposed.png HTTP/2.0", host: "router-7.xxxxxxxx.me:8443"
                      May 15 16:05:38	nginx		2025/05/15 16:05:38 [error] 46260#100604: *12013 open() "/usr/local/www/apple-touch-icon.png" failed (2: No such file or directory), client: xxxx.xxx.xxx:1:d487:e82a:32e7:abed, server: , request: "GET /apple-touch-icon.png HTTP/2.0", host: "router-7.xxxxxxxx.me:8443"
                      May 15 16:05:38	nginx		2025/05/15 16:05:38 [error] 46260#100604: *12013 open() "/usr/local/www/apple-touch-icon-precomposed.png" failed (2: No such file or directory), client: xxxx.xxx.xxx:1:d487:e82a:32e7:abed, server: , request: "GET /apple-touch-icon-precomposed.png HTTP/2.0", host: "router-7.xxxxxxxx.me:8443"
                      May 15 15:41:45	nginx		2025/05/15 15:41:45 [error] 46260#100604: *12010 open() "/usr/local/www/apple-touch-icon.png" failed (2: No such file or directory), client: xxxx.xxx.xxx:1:d487:e82a:32e7:abed, server: , request: "GET /apple-touch-icon.png HTTP/2.0", host: "router-7.xxxxxxxx.me:8443"
                      May 15 15:41:45	nginx		2025/05/15 15:41:45 [error] 46260#100604: *12010 open() "/usr/local/www/apple-touch-icon-precomposed.png" failed (2: No such file or directory), client: xxxx.xxx.xxx:1:d487:e82a:32e7:abed, server: , request: "GET /apple-touch-icon-precomposed.png HTTP/2.0", host: "router-7.xxxxxxxx.me:8443"
                      May 15 15:15:26	php_pfb	45552	[pfBlockerNG] filterlog daemon started
                      May 15 15:15:25	tail_pfb	45236	[pfBlockerNG] Firewall Filter Service started
                      May 15 15:15:25	php_pfb	39085	[pfBlockerNG] filterlog daemon stopped
                      May 15 15:15:25	tail_pfb	38295	[pfBlockerNG] Firewall Filter Service stopped
                      May 15 15:15:25	php	74778	[pfBlockerNG] Restarting firewall filter daemon
                      May 15 15:15:25	php_pfb	31487	[pfBlockerNG] filterlog daemon stopped
                      May 15 15:15:25	tail_pfb	30407	[pfBlockerNG] Firewall Filter Service stopped
                      May 15 15:15:25	check_reload_status	679	Reloading filter
                      May 15 15:15:25	php	74778	[pfBlockerNG] No changes to Firewall rules, skipping Filter Reload
                      May 15 15:15:04	lighttpd_pfb	94273	[pfBlockerNG] DNSBL Webserver started
                      May 15 15:15:04	lighttpd_pfb	92652	[pfBlockerNG] DNSBL Webserver stopped
                      May 15 15:15:04	lighttpd_pfb	86295	[pfBlockerNG] DNSBL Webserver stopped
                      May 15 15:15:04	check_reload_status	679	Syncing firewall
                      May 15 15:15:00	php	74778	[pfBlockerNG] Starting cron process.
                      May 15 14:03:54	check_reload_status	679	Reloading filter
                      May 15 14:03:54	php-fpm	37396	/system.php: NTPD is starting up.
                      May 15 14:03:53	php-fpm	37396	/system.php: The command '/usr/sbin/arp -s '192.168.1.1' '3c:ec:ef:dc:ed:22'' returned exit code '1', the output was 'arp: set 192.168.1.1: Operation not permitted'
                      May 15 14:03:49	php-fpm	37396	/system.php: The command '/usr/sbin/arp -s '192.168.1.1' '3c:ec:ef:dc:ed:22'' returned exit code '1', the output was 'arp: set 192.168.1.1: Operation not permitted'
                      May 15 14:03:48	check_reload_status	679	Syncing firewall
                      May 15 14:03:48	php-fpm	37396	/system.php: Configuration Change: admin@xxxx.xxx.xxx:1:d487:e82a:32e7:abed (Local Database): System:
                      May 15 12:30:17	php-cgi	66319	rc.update_urltables: /etc/rc.update_urltables: pfB_PRI1_6_v6 does not need updating.
                      May 15 12:30:17	php-cgi	66319	rc.update_urltables: /etc/rc.update_urltables: pfB_PRI2_v4 does not need updating.
                      May 15 12:30:17	php-cgi	66319	rc.update_urltables: /etc/rc.update_urltables: pfB_PRI1_v4 does not need updating.
                      May 15 12:30:17	php-cgi	66319	rc.update_urltables: /etc/rc.update_urltables: Starting URL table alias updates
                      May 15 12:30:00	php-cgi	66319	rc.update_urltables: /etc/rc.update_urltables: Sleeping for 17 seconds.
                      May 15 12:30:00	php-cgi	66319	rc.update_urltables: /etc/rc.update_urltables: Starting up.
                      May 15 12:23:03	sshd	94207	Timeout, client not responding from user admin 10.0.1.10 port 61675
                      May 15 12:16:53	sshd	94207	Accepted keyboard-interactive/pam for admin from 10.0.1.10 port 61675 ssh2
                      May 15 12:11:26	sshd	99392	Timeout, client not responding from user admin 10.0.1.10 port 61601
                      May 15 11:57:32	sshd	99392	Accepted keyboard-interactive/pam for admin from 10.0.1.10 port 61601 ssh2
                      May 15 11:28:42	php-fpm	6073	/index.php: Successful login for user 'admin' from: xxxx.xxx.xxx:1:d487:e82a:32e7:abed (Local Database)
                      May 15 08:12:00	check_reload_status	679	Reloading filter
                      May 15 08:12:00	php-fpm	47458	/rc.newwanipv6: Resyncing OpenVPN instances for interface WAN.
                      May 15 08:12:00	check_reload_status	679	Reloading filter
                      May 15 08:11:51	php-fpm	47458	/rc.newwanipv6: rc.newwanipv6: on (IP address: xxxx:xxx:xxxx:xxxx:xxxx:efff:fedc:e706) (interface: wan) (real interface: pppoe0).
                      May 15 08:11:51	php-fpm	47458	/rc.newwanipv6: rc.newwanipv6: Info: starting on pppoe0.
                      May 15 08:11:50	rtsold	57226	Received RA specifying route fe80::863d:c6ff:feac:800 for interface wan(pppoe0)
                      May 15 08:11:49	avahi-daemon	74876	Joining mDNS multicast group on interface ice0.IPv6 with address xxxx.xxx.xxx:1:xxxx:efff:fedc:ebdc.
                      May 15 08:11:49	avahi-daemon	74876	Leaving mDNS multicast group on interface ice0.IPv6 with address fe80::xxxx:efff:fedc:ebdc.
                      May 15 08:11:49	avahi-daemon	74876	Joining mDNS multicast group on interface ice0.1003.IPv6 with address xxxx.xxx.xxx:2:xxxx:efff:fedc:ebdc.
                      May 15 08:11:49	avahi-daemon	74876	Leaving mDNS multicast group on interface ice0.1003.IPv6 with address fe80::xxxx:efff:fedc:ebdc.
                      May 15 08:11:48	check_reload_status	679	Reloading filter
                      May 15 08:11:48	php-fpm	5087	/rc.newwanipv6: Resyncing OpenVPN instances for interface WAN.
                      May 15 08:11:48	check_reload_status	679	Reloading filter
                      May 15 08:11:43	check_reload_status	679	Reloading filter
                      May 15 08:11:43	check_reload_status	679	updating dyndns opt3
                      May 15 08:11:42	php-fpm	11672	/rc.linkup: The command '/usr/sbin/arp -s '192.168.1.1' '3c:ec:ef:dc:ed:22'' returned exit code '1', the output was 'arp: set 192.168.1.1: Operation not permitted'
                      May 15 08:11:41	check_reload_status	679	Reloading filter
                      May 15 08:11:41	check_reload_status	679	Reloading filter
                      May 15 08:11:41	check_reload_status	679	updating dyndns opt1
                      May 15 08:11:40	php-fpm	47458	/rc.linkup: The command '/usr/sbin/arp -s '192.168.1.1' '3c:ec:ef:dc:ed:22'' returned exit code '1', the output was 'arp: set 192.168.1.1: Operation not permitted'
                      May 15 08:11:40	php-fpm	11672	/rc.linkup: The command '/usr/local/sbin/unbound -c /var/unbound/unbound.conf' returned exit code '1', the output was '[1747293100] unbound[18692:0] error: bind: address already in use [1747293100] unbound[18692:0] fatal error: could not open ports'
                      May 15 08:11:39	kernel		Limiting ICMPv6 time exceeded output from 177 to 106 packets/sec
                      May 15 08:11:38	kernel		ice0: Media change is not supported.
                      May 15 08:11:38	check_reload_status	679	Restarting IPsec tunnels
                      May 15 08:11:38	avahi-daemon	74876	New relevant interface ice0.IPv4 for mDNS.
                      May 15 08:11:38	avahi-daemon	74876	Joining mDNS multicast group on interface ice0.IPv4 with address 10.0.1.1.
                      May 15 08:11:38	php-fpm	11672	/rc.linkup: The command '/sbin/ifconfig 'ice0' media '10Gbase-Twinax'' returned exit code '1', the output was 'ifconfig: SIOCSIFMEDIA (media): Operation not supported by device'
                      May 15 08:11:38	avahi-daemon	74876	Joining mDNS multicast group on interface ice0.IPv6 with address fe80::xxxx:efff:fedc:ebdc.
                      May 15 08:11:38	avahi-daemon	74876	Leaving mDNS multicast group on interface ice0.IPv6 with address fe80::1:1.
                      May 15 08:11:38	avahi-daemon	74876	Interface ice0.IPv4 no longer relevant for mDNS.
                      May 15 08:11:38	avahi-daemon	74876	Leaving mDNS multicast group on interface ice0.IPv4 with address 10.0.1.1.
                      May 15 08:11:38	php-fpm	11672	/rc.linkup: HOTPLUG: Configuring interface opt3
                      May 15 08:11:38	php-fpm	11672	/rc.linkup: DEVD Ethernet attached event for opt3
                      May 15 08:11:38	php-fpm	11672	/rc.linkup: Hotplug event detected for LAN(opt3) dynamic IP address (4: 10.0.1.1, 6: track6)
                      May 15 08:11:38	check_reload_status	679	Reloading filter
                      May 15 08:11:38	php-fpm	5087	/rc.newwanipv6: The command '/usr/local/sbin/unbound -c /var/unbound/unbound.conf' returned exit code '1', the output was '[1747293098] unbound[53735:0] error: bind: address already in use [1747293098] unbound[53735:0] fatal error: could not open ports'
                      May 15 08:11:37	php-fpm	46564	/rc.linkup: The command '/usr/sbin/arp -s '192.168.1.1' '3c:ec:ef:dc:ed:22'' returned exit code '1', the output was 'arp: set 192.168.1.1: Operation not permitted'
                      May 15 08:11:36	php-fpm	5087	/rc.newwanipv6: rc.newwanipv6: on (IP address: xxxx:xxx:xxxx:xxxx:xxxx:efff:fedc:e706) (interface: wan) (real interface: pppoe0).
                      May 15 08:11:36	php-fpm	5087	/rc.newwanipv6: rc.newwanipv6: Info: starting on pppoe0.
                      May 15 08:11:36	kernel		ice0: Media change is not supported.
                      May 15 08:11:36	check_reload_status	679	Restarting IPsec tunnels
                      May 15 08:11:36	avahi-daemon	74876	Joining mDNS multicast group on interface ice0.IPv6 with address fe80::1:1.
                      May 15 08:11:36	avahi-daemon	74876	Leaving mDNS multicast group on interface ice0.IPv6 with address xxxx.xxx.xxx:1:xxxx:efff:fedc:ebdc.
                      May 15 08:11:36	avahi-daemon	74876	New relevant interface ice0.1003.IPv4 for mDNS.
                      May 15 08:11:36	avahi-daemon	74876	Joining mDNS multicast group on interface ice0.1003.IPv4 with address 172.16.1.1.
                      May 15 08:11:36	php-fpm	47458	/rc.linkup: The command '/sbin/ifconfig 'ice0' media 'autoselect'' returned exit code '1', the output was 'ifconfig: SIOCSIFMEDIA (media): Operation not supported by device'
                      May 15 08:11:36	avahi-daemon	74876	Joining mDNS multicast group on interface ice0.1003.IPv6 with address fe80::xxxx:efff:fedc:ebdc.
                      May 15 08:11:36	avahi-daemon	74876	Leaving mDNS multicast group on interface ice0.1003.IPv6 with address xxxx.xxx.xxx:2:xxxx:efff:fedc:ebdc.
                      May 15 08:11:36	avahi-daemon	74876	Interface ice0.1003.IPv4 no longer relevant for mDNS.
                      May 15 08:11:36	avahi-daemon	74876	Leaving mDNS multicast group on interface ice0.1003.IPv4 with address 172.16.1.1.
                      May 15 08:11:36	php-fpm	47458	/rc.linkup: HOTPLUG: Configuring interface opt1
                      May 15 08:11:36	php-fpm	47458	/rc.linkup: DEVD Ethernet attached event for opt1
                      May 15 08:11:36	php-fpm	47458	/rc.linkup: Hotplug event detected for VLAN(opt1) dynamic IP address (4: 172.16.1.1, 6: track6)
                      May 15 08:11:36	check_reload_status	679	Reloading filter
                      May 15 08:11:36	check_reload_status	679	Reloading filter
                      May 15 08:11:35	php-fpm	95967	/rc.linkup: The command '/usr/sbin/arp -s '192.168.1.1' '3c:ec:ef:dc:ed:22'' returned exit code '1', the output was 'arp: set 192.168.1.1: Operation not permitted'
                      May 15 08:11:34	php-fpm	95967	/rc.linkup: The command '/usr/local/sbin/unbound -c /var/unbound/unbound.conf' returned exit code '1', the output was '[1747293094] unbound[57538:0] error: bind: address already in use [1747293094] unbound[57538:0] fatal error: could not open ports'
                      May 15 08:11:32	php-fpm	95967	/rc.linkup: DEVD Ethernet detached event for opt1
                      May 15 08:11:32	php-fpm	95967	/rc.linkup: Hotplug event detected for VLAN(opt1) dynamic IP address (4: 172.16.1.1, 6: track6)
                      May 15 08:11:32	php-fpm	46564	/rc.linkup: DEVD Ethernet detached event for opt3
                      May 15 08:11:32	php-fpm	46564	/rc.linkup: Hotplug event detected for LAN(opt3) dynamic IP address (4: 10.0.1.1, 6: track6)
                      May 15 08:11:31	kernel		ice0.1003: link state changed to UP
                      May 15 08:11:31	kernel		ice0: link state changed to UP
                      May 15 08:11:31	kernel		ice0: Link is up, 10 Gbps Full Duplex, Requested FEC: None, Negotiated FEC: None, Autoneg: False, Flow Control: None
                      May 15 08:11:31	check_reload_status	679	Linkup starting ice0.1003
                      May 15 08:11:31	check_reload_status	679	Linkup starting ice0
                      May 15 08:11:31	kernel		ice0.1003: link state changed to DOWN
                      May 15 08:11:31	kernel		ice0: link state changed to DOWN
                      May 15 08:11:31	check_reload_status	679	Linkup starting ice0.1003
                      May 15 08:11:31	check_reload_status	679	Linkup starting ice0
                      May 15 07:15:24	php_pfb	51466	[pfBlockerNG] filterlog daemon started
                      May 15 07:15:24	tail_pfb	50374	[pfBlockerNG] Firewall Filter Service started
                      May 15 07:15:24	php_pfb	44811	[pfBlockerNG] filterlog daemon stopped
                      May 15 07:15:24	tail_pfb	44301	[pfBlockerNG] Firewall Filter Service stopped
                      May 15 07:15:24	php	97355	[pfBlockerNG] Restarting firewall filter daemon
                      May 15 07:15:24	php_pfb	37950	[pfBlockerNG] filterlog daemon stopped
                      May 15 07:15:24	tail_pfb	37374	[pfBlockerNG] Firewall Filter Service stopped
                      May 15 07:15:24	check_reload_status	679	Reloading filter
                      May 15 07:15:24	php	97355	[pfBlockerNG] No changes to Firewall rules, skipping Filter Reload
                      May 15 07:15:04	lighttpd_pfb	15559	[pfBlockerNG] DNSBL Webserver started
                      May 15 07:15:04	lighttpd_pfb	14123	[pfBlockerNG] DNSBL Webserver stopped
                      May 15 07:15:04	lighttpd_pfb	8547	[pfBlockerNG] DNSBL Webserver stopped
                      May 15 07:15:04	check_reload_status	679	Syncing firewall
                      May 15 07:15:04	php	97355	/usr/local/www/pfblockerng/pfblockerng.php: Configuration Change: (system): pfBlockerNG: saving DNSBL changes
                      May 15 07:15:00	php	97355	[pfBlockerNG] Starting cron process.
                      May 15 05:53:00	avahi-daemon	74876	Server startup complete. Host name is Router-7.local. Local service cookie is 3249482383.
                      May 15 05:53:00	avahi-daemon	74876	Network interface enumeration completed.
                      May 15 05:53:00	avahi-daemon	74876	New relevant interface ice0.IPv4 for mDNS.
                      May 15 05:53:00	avahi-daemon	74876	Joining mDNS multicast group on interface ice0.IPv4 with address 10.0.1.1.
                      May 15 05:53:00	avahi-daemon	74876	New relevant interface ice0.IPv6 for mDNS.
                      May 15 05:53:00	avahi-daemon	74876	Joining mDNS multicast group on interface ice0.IPv6 with address xxxx.xxx.xxx:1:xxxx:efff:fedc:ebdc.
                      May 15 05:53:00	avahi-daemon	74876	New relevant interface ice0.1003.IPv4 for mDNS.
                      May 15 05:53:00	avahi-daemon	74876	Joining mDNS multicast group on interface ice0.1003.IPv4 with address 172.16.1.1.
                      May 15 05:53:00	avahi-daemon	74876	New relevant interface ice0.1003.IPv6 for mDNS.
                      May 15 05:53:00	avahi-daemon	74876	Joining mDNS multicast group on interface ice0.1003.IPv6 with address xxxx.xxx.xxx:2:xxxx:efff:fedc:ebdc.
                      May 15 05:53:00	avahi-daemon	74876	No service file found in /usr/local/etc/avahi/services.
                      May 15 05:53:00	avahi-daemon	74876	avahi-daemon 0.8 starting up.
                      May 15 05:53:00	avahi-daemon	74876	Successfully dropped root privileges.
                      May 15 05:53:00	avahi-daemon	74876	Found user 'avahi' (UID 558) and group 'avahi' (GID 558).
                      May 15 05:53:00	avahi-daemon	76628	avahi-daemon 0.8 exiting.
                      May 15 05:53:00	avahi-daemon	76628	IP_DROP_MEMBERSHIP failed: Can't assign requested address
                      May 15 05:53:00	avahi-daemon	76628	Leaving mDNS multicast group on interface ice0.IPv4 with address 10.0.1.1.
                      May 15 05:53:00	avahi-daemon	76628	Leaving mDNS multicast group on interface ice0.IPv6 with address xxxx.xxx.xxx:1:xxxx:efff:fedc:ebdc.
                      May 15 05:53:00	avahi-daemon	76628	Leaving mDNS multicast group on interface ice0.1003.IPv4 with address 172.16.1.1.
                      May 15 05:53:00	avahi-daemon	76628	Leaving mDNS multicast group on interface ice0.1003.IPv6 with address xxxx.xxx.xxx:2:xxxx:efff:fedc:ebdc.
                      May 15 05:53:00	avahi-daemon	76628	Got SIGTERM, quitting.
                      May 15 04:29:19	check_reload_status	679	Reloading filter
                      May 15 04:29:19	php-fpm	47458	/rc.newwanipv6: Resyncing OpenVPN instances for interface WAN.
                      May 15 04:29:19	check_reload_status	679	Reloading filter
                      May 15 04:29:10	php-fpm	47458	/rc.newwanipv6: rc.newwanipv6: on (IP address: xxxx:xxx:xxxx:xxxx:xxxx:efff:fedc:e706) (interface: wan) (real interface: pppoe0).
                      May 15 04:29:10	php-fpm	47458	/rc.newwanipv6: rc.newwanipv6: Info: starting on pppoe0.
                      May 15 04:29:09	rtsold	69850	Received RA specifying route fe80::863d:c6ff:feac:800 for interface wan(pppoe0)
                      May 15 04:29:08	avahi-daemon	76628	Joining mDNS multicast group on interface ice0.IPv6 with address xxxx.xxx.xxx:1:xxxx:efff:fedc:ebdc.
                      May 15 04:29:08	avahi-daemon	76628	Leaving mDNS multicast group on interface ice0.IPv6 with address fe80::xxxx:efff:fedc:ebdc.
                      May 15 04:29:08	avahi-daemon	76628	Joining mDNS multicast group on interface ice0.1003.IPv6 with address xxxx.xxx.xxx:2:xxxx:efff:fedc:ebdc.
                      May 15 04:29:08	avahi-daemon	76628	Leaving mDNS multicast group on interface ice0.1003.IPv6 with address fe80::xxxx:efff:fedc:ebdc.
                      May 15 04:29:06	check_reload_status	679	Reloading filter
                      May 15 04:29:06	php-fpm	46564	/rc.newwanipv6: Resyncing OpenVPN instances for interface WAN.
                      May 15 04:29:06	check_reload_status	679	Reloading filter
                      May 15 04:29:02	check_reload_status	679	Reloading filter
                      May 15 04:29:02	check_reload_status	679	updating dyndns opt1
                      May 15 04:29:00	php-fpm	47458	/rc.linkup: The command '/usr/sbin/arp -s '192.168.1.1' '3c:ec:ef:dc:ed:22'' returned exit code '1', the output was 'arp: set 192.168.1.1: Operation not permitted'
                      May 15 04:28:59	check_reload_status	679	Reloading filter
                      May 15 04:28:59	check_reload_status	679	Reloading filter
                      May 15 04:28:59	check_reload_status	679	updating dyndns opt3
                      May 15 04:28:58	php-fpm	40958	/rc.linkup: The command '/usr/sbin/arp -s '192.168.1.1' '3c:ec:ef:dc:ed:22'' returned exit code '1', the output was 'arp: set 192.168.1.1: Operation not permitted'
                      May 15 04:28:58	php-fpm	47458	/rc.linkup: The command '/usr/local/sbin/unbound -c /var/unbound/unbound.conf' returned exit code '1', the output was '[1747279738] unbound[88133:0] error: bind: address already in use [1747279738] unbound[88133:0] fatal error: could not open ports'
                      May 15 04:28:56	kernel		ice0: Media change is not supported.
                      May 15 04:28:56	check_reload_status	679	Restarting IPsec tunnels
                      May 15 04:28:56	avahi-daemon	76628	New relevant interface ice0.1003.IPv4 for mDNS.
                      May 15 04:28:56	avahi-daemon	76628	Joining mDNS multicast group on interface ice0.1003.IPv4 with address 172.16.1.1.
                      May 15 04:28:56	php-fpm	47458	/rc.linkup: The command '/sbin/ifconfig 'ice0' media 'autoselect'' returned exit code '1', the output was 'ifconfig: SIOCSIFMEDIA (media): Operation not supported by device'
                      May 15 04:28:56	avahi-daemon	76628	Joining mDNS multicast group on interface ice0.1003.IPv6 with address fe80::xxxx:efff:fedc:ebdc.
                      May 15 04:28:56	avahi-daemon	76628	Leaving mDNS multicast group on interface ice0.1003.IPv6 with address fe80::1:1.
                      May 15 04:28:56	avahi-daemon	76628	Interface ice0.1003.IPv4 no longer relevant for mDNS.
                      May 15 04:28:56	avahi-daemon	76628	Leaving mDNS multicast group on interface ice0.1003.IPv4 with address 172.16.1.1.
                      May 15 04:28:56	php-fpm	47458	/rc.linkup: HOTPLUG: Configuring interface opt1
                      May 15 04:28:56	php-fpm	47458	/rc.linkup: DEVD Ethernet attached event for opt1
                      May 15 04:28:56	php-fpm	47458	/rc.linkup: Hotplug event detected for VLAN(opt1) dynamic IP address (4: 172.16.1.1, 6: track6)
                      May 15 04:28:56	check_reload_status	679	Reloading filter
                      May 15 04:28:56	php-fpm	46564	/rc.newwanipv6: The command '/usr/local/sbin/unbound -c /var/unbound/unbound.conf' returned exit code '1', the output was '[1747279736] unbound[97371:0] error: bind: address already in use [1747279736] unbound[97371:0] fatal error: could not open ports'
                      May 15 04:28:55	php-fpm	95967	/rc.linkup: The command '/usr/sbin/arp -s '192.168.1.1' '3c:ec:ef:dc:ed:22'' returned exit code '1', the output was 'arp: set 192.168.1.1: Operation not permitted'
                      May 15 04:28:54	kernel		ice0: Media change is not supported.
                      May 15 04:28:54	php-fpm	46564	/rc.newwanipv6: rc.newwanipv6: on (IP address: xxxx:xxx:xxxx:xxxx:xxxx:efff:fedc:e706) (interface: wan) (real interface: pppoe0).
                      May 15 04:28:54	php-fpm	46564	/rc.newwanipv6: rc.newwanipv6: Info: starting on pppoe0.
                      May 15 04:28:54	check_reload_status	679	Restarting IPsec tunnels
                      May 15 04:28:54	avahi-daemon	76628	Joining mDNS multicast group on interface ice0.1003.IPv6 with address fe80::1:1.
                      May 15 04:28:54	avahi-daemon	76628	Leaving mDNS multicast group on interface ice0.1003.IPv6 with address xxxx.xxx.xxx:2:xxxx:efff:fedc:ebdc.
                      May 15 04:28:54	avahi-daemon	76628	New relevant interface ice0.IPv4 for mDNS.
                      May 15 04:28:54	avahi-daemon	76628	Joining mDNS multicast group on interface ice0.IPv4 with address 10.0.1.1.
                      May 15 04:28:54	php-fpm	40958	/rc.linkup: The command '/sbin/ifconfig 'ice0' media '10Gbase-Twinax'' returned exit code '1', the output was 'ifconfig: SIOCSIFMEDIA (media): Operation not supported by device'
                      May 15 04:28:54	avahi-daemon	76628	Joining mDNS multicast group on interface ice0.IPv6 with address fe80::xxxx:efff:fedc:ebdc.
                      May 15 04:28:54	avahi-daemon	76628	Leaving mDNS multicast group on interface ice0.IPv6 with address xxxx.xxx.xxx:1:xxxx:efff:fedc:ebdc.
                      May 15 04:28:54	avahi-daemon	76628	Interface ice0.IPv4 no longer relevant for mDNS.
                      May 15 04:28:54	avahi-daemon	76628	Leaving mDNS multicast group on interface ice0.IPv4 with address 10.0.1.1.
                      May 15 04:28:54	php-fpm	40958	/rc.linkup: HOTPLUG: Configuring interface opt3
                      May 15 04:28:54	php-fpm	40958	/rc.linkup: DEVD Ethernet attached event for opt3
                      May 15 04:28:54	php-fpm	40958	/rc.linkup: Hotplug event detected for LAN(opt3) dynamic IP address (4: 10.0.1.1, 6: track6)
                      May 15 04:28:54	check_reload_status	679	Reloading filter
                      May 15 04:28:54	check_reload_status	679	Reloading filter
                      May 15 04:28:53	php-fpm	5087	/rc.linkup: The command '/usr/sbin/arp -s '192.168.1.1' '3c:ec:ef:dc:ed:22'' returned exit code '1', the output was 'arp: set 192.168.1.1: Operation not permitted'
                      May 15 04:28:52	php-fpm	5087	/rc.linkup: The command '/usr/local/sbin/unbound -c /var/unbound/unbound.conf' returned exit code '1', the output was '[1747279732] unbound[23995:0] error: bind: address already in use [1747279732] unbound[23995:0] fatal error: could not open ports'
                      May 15 04:28:50	php-fpm	5087	/rc.linkup: DEVD Ethernet detached event for opt3
                      May 15 04:28:50	php-fpm	5087	/rc.linkup: Hotplug event detected for LAN(opt3) dynamic IP address (4: 10.0.1.1, 6: track6)
                      May 15 04:28:50	php-fpm	95967	/rc.linkup: DEVD Ethernet detached event for opt1
                      May 15 04:28:50	php-fpm	95967	/rc.linkup: Hotplug event detected for VLAN(opt1) dynamic IP address (4: 172.16.1.1, 6: track6)
                      May 15 04:28:49	check_reload_status	679	Linkup starting ice0.1003
                      May 15 04:28:49	kernel		ice0.1003: link state changed to UP
                      May 15 04:28:49	kernel		ice0: link state changed to UP
                      May 15 04:28:49	kernel		ice0: Link is up, 10 Gbps Full Duplex, Requested FEC: None, Negotiated FEC: None, Autoneg: False, Flow Control: None
                      May 15 04:28:49	kernel		ice0.1003: link state changed to DOWN
                      May 15 04:28:49	kernel		ice0: link state changed to DOWN
                      May 15 04:28:49	check_reload_status	679	Linkup starting ice0
                      May 15 04:28:49	check_reload_status	679	Linkup starting ice0.1003
                      May 15 04:28:49	check_reload_status	679	Linkup starting ice0
                      May 14 23:15:26	php_pfb	78795	[pfBlockerNG] filterlog daemon started
                      
                      

                      ☕️

                      1 Reply Last reply Reply Quote 0
                      • stephenw10S
                        stephenw10 Netgate Administrator
                        last edited by

                        @RobbieTT said in DNS resolver exiting when loading pfblocker 25.03.b.20250409.2208:

                        May 15 08:11:31 kernel ice0: link state changed to DOWN

                        It's actually seeing ice0 lose link though. What's that connected to, a switch I assume? Does that also log it losing link?

                        RobbieTTR 1 Reply Last reply Reply Quote 0
                        • RobbieTTR
                          RobbieTT @stephenw10
                          last edited by RobbieTT

                          @stephenw10

                          I sent you a more complete and unredacted log by email, showing the cycle of all these services going down and up again.

                          There is no lost link according to the (UniFi) switch; up for 200+ days with no errors.

                          • ice0 (opt3) = LAN on a native SFP28 port running with 10 GbE SFP+ DAC.
                          • ice0.1003 (opt1) = VLAN
                          • igc0 (opt4) = pppoe0 / WAN link to ONT

                          Slightly odd to see hotplug events for a VLAN that shares the same physical DAC as the LAN.

                          Lots of services restarting (pretty much all of them) but unbound suffers the worst.

                          ☕️

                          1 Reply Last reply Reply Quote 0
                          • stephenw10S
                            stephenw10 Netgate Administrator
                            last edited by stephenw10

                            Mmm, in each case though the first thing logged is that ice0 and the VLAN on it lose link momentarily:

                            May 16 04:53:26 kernel ice0.1003: link state changed to UP
                            May 16 04:53:26 kernel ice0: link state changed to UP
                            May 16 04:53:26 kernel ice0: Link is up, 10 Gbps Full Duplex, Requested FEC: None, Negotiated FEC: None, Autoneg: False, Flow Control: None
                            May 16 04:53:26 check_reload_status 679 Linkup starting ice0.1003
                            May 16 04:53:26 check_reload_status 679 Linkup starting ice0
                            May 16 04:53:26 kernel ice0.1003: link state changed to DOWN
                            May 16 04:53:26 kernel ice0: link state changed to DOWN
                            May 16 04:53:26 check_reload_status 679 Linkup starting ice0.1003
                            May 16 04:53:26 check_reload_status 679 Linkup starting ice0
                            

                            Can you try a different port there?

                            Weird that the switch doesn't show it though...

                            RobbieTTR 1 Reply Last reply Reply Quote 0
                            • RobbieTTR
                              RobbieTT @stephenw10
                              last edited by

                              @stephenw10 said in DNS resolver exiting when loading pfblocker 25.03.b.20250409.2208:

                              Mmm, in each case though the first thing logged is that ice0 and the VLAN on it lose link momentarily:
                              Can you try a different port there?

                              Weird that the switch doesn't show it though...

                              Tried a different port and then the original port with a different DAC.

                              The fault follows whatever DAC or port is being used, no interruptions or even packets lost shown on switch (or on the pfSense GUI) and no interruptions to the upstream PPPoE server in-use IP address.

                              To me this looks like a pfSense issue but to be sure I have gone back to the original ports and original DAC but running on the v24.11 'current release' again. So far the symptoms have not occurred on the older firmware but need to leave it for another day or so to be sure.

                              ☕️

                              w0wW 1 Reply Last reply Reply Quote 0
                              • w0wW
                                w0w @RobbieTT
                                last edited by w0w

                                @RobbieTT
                                Yep, maybe driver issue as well.
                                Something similar I have had with ix driver, like link drops but not registered on the other side. Once a week... Can't tell now is it still happening or not, since currently using different card.

                                1 Reply Last reply Reply Quote 0
                                • stephenw10S
                                  stephenw10 Netgate Administrator
                                  last edited by

                                  Hmm, it could be something weird in the ice driver I guess. I don't yet have anything using that to test with. Kernel link down is normally a very specific event though. 🤔

                                  The only other situation I've seen generate those is with Snort/Suricata in in-line mode where the virtual interface can change state when it restarts.

                                  RobbieTTR 1 Reply Last reply Reply Quote 0
                                  • RobbieTTR
                                    RobbieTT @stephenw10
                                    last edited by RobbieTT

                                    @stephenw10
                                    It's something we saw a while back with a race condition that was traced and resolved only after taking kernel dumps. I'm sure it is not the same issue though as that was more significant and could even cause a crash, just that pfSense has been able to trigger a similar spurious hotplug event before.

                                    #14431

                                    ☕️

                                    1 Reply Last reply Reply Quote 0
                                    • stephenw10S
                                      stephenw10 Netgate Administrator
                                      last edited by

                                      Yeah that was not quite the same. The interface triggering it did actually change status, pppoe went down in that case. ice0 should not change state here unless it really does lose link. And if it does then I'd expect the other side to log it also. You might try resaving the ice0 interface, which should bump the link state, and then checking how that is shown in the logs at both ends of the link. Just to be sure the switch does log it.

                                      RobbieTTR 2 Replies Last reply Reply Quote 0
                                      • RobbieTTR
                                        RobbieTT @stephenw10
                                        last edited by RobbieTT

                                        @stephenw10
                                        Ok, what command do I need to re-save the ice0 interface?

                                        As a serious bit of utter trivia I also get this harmless error

                                        May 15 22:23:47	nginx		2025/05/15 22:23:47 [error] 46260#100604: *12679 open() "/usr/local/www/apple-touch-icon.png" failed (2: No such file or directory), client: xxxx:abed, server: , request: "GET /apple-touch-icon.png HTTP/2.0", host: "router-7.xxxx.me:8443"
                                        May 15 22:23:47	nginx		2025/05/15 22:23:47 [error] 46260#100604: *12679 open() "/usr/local/www/apple-touch-icon-precomposed.png" failed (2: No such file or directory), client: 
                                        

                                        The actual path is: /usr/local/www/apple-touch/ to find the icon.png files.

                                        ☕️

                                        1 Reply Last reply Reply Quote 0
                                        • stephenw10S
                                          stephenw10 Netgate Administrator
                                          last edited by

                                          I'd just resave the assigned interface in the GUI. But you could also just ifconfig down/up the interface at the CLI.

                                          Do those icons actually fail to display on the client?

                                          It could just be the client device(s) looking for those in multiple locations.

                                          RobbieTTR 3 Replies Last reply Reply Quote 0
                                          • RobbieTTR
                                            RobbieTT @stephenw10
                                            last edited by

                                            @stephenw10

                                            As I'm still running v24.11 (still no hotplug events etc) I re-saved the interface for comparison later:

                                            Time	Process	PID	Message
                                            May 23 19:29:21	php_pfb	44380	[pfBlockerNG] filterlog daemon started
                                            May 23 19:29:20	tail_pfb	44127	[pfBlockerNG] Firewall Filter Service started
                                            May 23 19:29:20	lighttpd_pfb	42103	[pfBlockerNG] DNSBL Webserver started
                                            May 23 19:29:20	php_pfb	39811	[pfBlockerNG] filterlog daemon stopped
                                            May 23 19:29:20	tail_pfb	38493	[pfBlockerNG] Firewall Filter Service stopped
                                            May 23 19:29:20	lighttpd_pfb	38314	[pfBlockerNG] DNSBL Webserver stopped
                                            May 23 19:29:20	rtsold	15216	Received RA specifying route fe80::xxx:xxxx:xxxx:b100 for interface wan(pppoe0)
                                            May 23 19:29:20	avahi-daemon	71022	Server startup complete. Host name is Router-7.local. Local service cookie is 830558610.
                                            May 23 19:29:20	avahi-daemon	71022	Network interface enumeration completed.
                                            May 23 19:29:20	avahi-daemon	71022	New relevant interface ice0.IPv4 for mDNS.
                                            May 23 19:29:20	avahi-daemon	71022	Joining mDNS multicast group on interface ice0.IPv4 with address 10.0.1.1.
                                            May 23 19:29:20	avahi-daemon	71022	New relevant interface ice0.IPv6 for mDNS.
                                            May 23 19:29:20	avahi-daemon	71022	Joining mDNS multicast group on interface ice0.IPv6 with address 2a02:xxx:xxxx:x:xxxx:xxxx:xxxx:ebdc.
                                            May 23 19:29:20	avahi-daemon	71022	New relevant interface ice0.1003.IPv4 for mDNS.
                                            May 23 19:29:20	avahi-daemon	71022	Joining mDNS multicast group on interface ice0.1003.IPv4 with address 172.16.1.1.
                                            May 23 19:29:20	avahi-daemon	71022	New relevant interface ice0.1003.IPv6 for mDNS.
                                            May 23 19:29:20	avahi-daemon	71022	Joining mDNS multicast group on interface ice0.1003.IPv6 with address 2a02:xxx:xxxx:x:xxxx:xxxx:xxxx:ebdc.
                                            May 23 19:29:20	avahi-daemon	71022	No service file found in /usr/local/etc/avahi/services.
                                            May 23 19:29:20	avahi-daemon	71022	avahi-daemon 0.8 starting up.
                                            May 23 19:29:20	avahi-daemon	71022	Successfully dropped root privileges.
                                            May 23 19:29:20	avahi-daemon	71022	Found user 'avahi' (UID 558) and group 'avahi' (GID 558).
                                            May 23 19:29:19	php-fpm	16922	/rc.start_packages: Starting service avahi
                                            May 23 19:29:19	avahi-daemon	35171	avahi-daemon 0.8 exiting.
                                            May 23 19:29:19	avahi-daemon	35171	Leaving mDNS multicast group on interface ice0.IPv4 with address 10.0.1.1.
                                            May 23 19:29:19	avahi-daemon	35171	Leaving mDNS multicast group on interface ice0.IPv6 with address 2a02:xxx:xxxx:x:xxxx:xxxx:xxxx:ebdc.
                                            May 23 19:29:19	avahi-daemon	35171	Leaving mDNS multicast group on interface ice0.1003.IPv4 with address 172.16.1.1.
                                            May 23 19:29:19	avahi-daemon	35171	Leaving mDNS multicast group on interface ice0.1003.IPv6 with address 2a02:xxx:xxxx:x:xxxx:xxxx:xxxx:ebdc.
                                            May 23 19:29:19	avahi-daemon	35171	Got SIGTERM, quitting.
                                            May 23 19:29:19	php-fpm	16922	/rc.start_packages: Stopping service avahi
                                            May 23 19:29:19	php-fpm	16922	/rc.start_packages: Restarting/Starting all packages.
                                            May 23 19:29:19	avahi-daemon	35171	Joining mDNS multicast group on interface ice0.IPv6 with address 2a02:xxx:xxxx:x:xxxx:xxxx:xxxx:ebdc.
                                            May 23 19:29:19	avahi-daemon	35171	Leaving mDNS multicast group on interface ice0.IPv6 with address fe80::1:1.
                                            May 23 19:29:19	avahi-daemon	35171	Joining mDNS multicast group on interface ice0.1003.IPv6 with address 2a02:xxx:xxxx:x:xxxx:xxxx:xxxx:ebdc.
                                            May 23 19:29:19	avahi-daemon	35171	Leaving mDNS multicast group on interface ice0.1003.IPv6 with address fe80::1:1.
                                            May 23 19:29:18	check_reload_status	667	Reloading filter
                                            May 23 19:29:18	check_reload_status	667	Reloading filter
                                            May 23 19:29:18	check_reload_status	667	Starting packages
                                            May 23 19:29:18	php-fpm	62604	/rc.newwanipv6: Netgate pfSense Plus package system has detected an IP change or dynamic WAN reconnection - -> 2a02:xxx:xxxx:x:xxxx:xxxx:xxxx:ebdc - Restarting packages.
                                            May 23 19:29:18	php-fpm	62604	/rc.newwanipv6: Creating rrd update script
                                            May 23 19:29:18	php-fpm	62604	/rc.newwanipv6: Resyncing OpenVPN instances for interface WAN.
                                            May 23 19:29:17	php-fpm	62604	/rc.newwanipv6: The command '/usr/sbin/arp -s '192.168.1.1' '3c:xx:xx:xx:xx:22'' returned exit code '1', the output was 'arp: set 192.168.1.1: Operation not permitted'
                                            May 23 19:29:15	php_pfb	5629	[pfBlockerNG] filterlog daemon started
                                            May 23 19:29:15	tail_pfb	5244	[pfBlockerNG] Firewall Filter Service started
                                            May 23 19:29:15	lighttpd_pfb	2862	[pfBlockerNG] DNSBL Webserver started
                                            May 23 19:29:15	php_pfb	978	[pfBlockerNG] filterlog daemon stopped
                                            May 23 19:29:15	tail_pfb	217	[pfBlockerNG] Firewall Filter Service stopped
                                            May 23 19:29:15	lighttpd_pfb	23	[pfBlockerNG] DNSBL Webserver stopped
                                            May 23 19:29:15	avahi-daemon	35171	Server startup complete. Host name is Router-7.local. Local service cookie is 354485446.
                                            May 23 19:29:15	avahi-daemon	35171	Network interface enumeration completed.
                                            May 23 19:29:15	avahi-daemon	35171	New relevant interface ice0.IPv4 for mDNS.
                                            May 23 19:29:15	avahi-daemon	35171	Joining mDNS multicast group on interface ice0.IPv4 with address 10.0.1.1.
                                            May 23 19:29:15	avahi-daemon	35171	New relevant interface ice0.IPv6 for mDNS.
                                            May 23 19:29:15	avahi-daemon	35171	Joining mDNS multicast group on interface ice0.IPv6 with address fe80::1:1.
                                            May 23 19:29:15	avahi-daemon	35171	New relevant interface ice0.1003.IPv4 for mDNS.
                                            May 23 19:29:15	avahi-daemon	35171	Joining mDNS multicast group on interface ice0.1003.IPv4 with address 172.16.1.1.
                                            May 23 19:29:15	avahi-daemon	35171	New relevant interface ice0.1003.IPv6 for mDNS.
                                            May 23 19:29:15	avahi-daemon	35171	Joining mDNS multicast group on interface ice0.1003.IPv6 with address fe80::1:1.
                                            May 23 19:29:15	avahi-daemon	35171	No service file found in /usr/local/etc/avahi/services.
                                            May 23 19:29:15	avahi-daemon	35171	avahi-daemon 0.8 starting up.
                                            May 23 19:29:15	avahi-daemon	35171	Successfully dropped root privileges.
                                            May 23 19:29:15	avahi-daemon	35171	Found user 'avahi' (UID 558) and group 'avahi' (GID 558).
                                            May 23 19:29:15	check_reload_status	667	Reloading filter
                                            May 23 19:29:14	php-fpm	79962	/rc.start_packages: Starting service avahi
                                            May 23 19:29:14	avahi-daemon	18747	avahi-daemon 0.8 exiting.
                                            May 23 19:29:14	avahi-daemon	18747	Leaving mDNS multicast group on interface ice0.IPv4 with address 10.0.1.1.
                                            May 23 19:29:14	avahi-daemon	18747	Leaving mDNS multicast group on interface ice0.IPv6 with address fe80::xxxx:xxxx:xxxx:ebdc.
                                            May 23 19:29:14	avahi-daemon	18747	IP_DROP_MEMBERSHIP failed: Can't assign requested address
                                            May 23 19:29:14	avahi-daemon	18747	Leaving mDNS multicast group on interface ice0.1003.IPv4 with address 172.16.1.1.
                                            May 23 19:29:14	avahi-daemon	18747	Leaving mDNS multicast group on interface ice0.1003.IPv6 with address fe80::1:1.
                                            May 23 19:29:14	avahi-daemon	18747	Got SIGTERM, quitting.
                                            May 23 19:29:14	php-fpm	79962	/rc.start_packages: Stopping service avahi
                                            May 23 19:29:14	php-fpm	79962	/rc.start_packages: Restarting/Starting all packages.
                                            May 23 19:29:13	check_reload_status	667	Starting packages
                                            May 23 19:29:13	php-fpm	46785	/interfaces.php: Creating rrd update script
                                            May 23 19:29:13	check_reload_status	667	Reloading filter
                                            May 23 19:29:12	php-fpm	46785	/interfaces.php: The command '/usr/sbin/arp -s '192.168.1.1' '3c:xx:xx:xx:xx:22'' returned exit code '1', the output was 'arp: set 192.168.1.1: Operation not permitted'
                                            May 23 19:29:11	php-fpm	46785	/interfaces.php: Resyncing OpenVPN instances for interface LAN.
                                            May 23 19:29:08	php-fpm	46785	/interfaces.php: The command '/usr/sbin/arp -s '192.168.1.1' '3c:xx:xx:xx:xx:22'' returned exit code '1', the output was 'arp: set 192.168.1.1: Operation not permitted'
                                            May 23 19:29:05	php-fpm	62604	/rc.newwanipv6: The command '/usr/local/sbin/unbound -c /var/unbound/unbound.conf' returned exit code '1', the output was '[1748024945] unbound[17454:0] error: bind: address already in use [1748024945] unbound[17454:0] fatal error: could not open ports'
                                            May 23 19:29:04	php-fpm	62604	/rc.newwanipv6: rc.newwanipv6: on (IP address: 2a02:xxx:xxxx:x:xxxx:xxxx:xxxx:ebdc) (interface: wan) (real interface: pppoe0).
                                            May 23 19:29:04	php-fpm	62604	/rc.newwanipv6: rc.newwanipv6: Info: starting on pppoe0.
                                            May 23 19:29:04	avahi-daemon	18747	Joining mDNS multicast group on interface ice0.1003.IPv6 with address fe80::1:1.
                                            May 23 19:29:04	avahi-daemon	18747	Leaving mDNS multicast group on interface ice0.1003.IPv6 with address 2a02:xxx:xxxx:x:xxxx:xxxx:xxxx:ebdc.
                                            May 23 19:29:04	check_reload_status	667	updating dyndns opt3
                                            May 23 19:29:03	php-fpm	46785	/interfaces.php: The command '/usr/sbin/arp -s '192.168.1.1' '3c:xx:xx:xx:xx:22'' returned exit code '1', the output was 'arp: set 192.168.1.1: Operation not permitted'
                                            May 23 19:29:00	check_reload_status	667	Restarting IPsec tunnels
                                            May 23 19:28:59	nginx		2025/05/23 19:28:59 [crit] 62339#100601: *361 SSL_write() failed (13: Permission denied) while processing HTTP/2 connection, client: 2a02:xxx:xxxx:x:xxxx:xxxx:xxxx:2b90, server: [::]:8443
                                            May 23 19:28:57	kernel		ice0: Media change is not supported.
                                            May 23 19:28:57	avahi-daemon	18747	New relevant interface ice0.IPv4 for mDNS.
                                            May 23 19:28:57	avahi-daemon	18747	Joining mDNS multicast group on interface ice0.IPv4 with address 10.0.1.1.
                                            May 23 19:28:57	php-fpm	46785	/interfaces.php: The command '/sbin/ifconfig 'ice0' media '10Gbase-Twinax'' returned exit code '1', the output was 'ifconfig: SIOCSIFMEDIA (media): Operation not supported by device'
                                            May 23 19:28:57	avahi-daemon	18747	Joining mDNS multicast group on interface ice0.IPv6 with address fe80::xxxx:xxxx:xxxx:ebdc.
                                            May 23 19:28:57	avahi-daemon	18747	Leaving mDNS multicast group on interface ice0.IPv6 with address fe80::1:1.
                                            May 23 19:28:57	avahi-daemon	18747	Joining mDNS multicast group on interface ice0.IPv6 with address fe80::1:1.
                                            May 23 19:28:57	avahi-daemon	18747	Leaving mDNS multicast group on interface ice0.IPv6 with address 2a02:xxx:xxxx:x:xxxx:xxxx:xxxx:ebdc.
                                            May 23 19:28:57	avahi-daemon	18747	Interface ice0.IPv4 no longer relevant for mDNS.
                                            May 23 19:28:57	avahi-daemon	18747	Leaving mDNS multicast group on interface ice0.IPv4 with address 10.0.1.1.
                                            May 23 19:28:52	check_reload_status	667	Syncing firewall
                                            May 23 19:28:52	php-fpm	79962	/interfaces.php: Configuration Change: admin@2a02:xxx:xxxx:x:xxxx:xxxx:xxxx:2b90(Local Database): Interfaces settings changed
                                            May 23 19:28:06	php-fpm	16922	/interfaces_assign.php: Creating rrd update script
                                            May 23 19:28:06	check_reload_status	667	Syncing firewall
                                            May 23 19:28:06	php-fpm	16922	/interfaces_assign.php: Configuration Change: admin@2a02:xxx:xxxx:x:xxxx:xxxx:xxxx:2b90(Local Database): Interfaces assignment settings changed
                                            

                                            Nothing of note to my eyes on the old firmware and the brief upset was noted by the switch. No 'hotplug' events during the interface re-save / change either.

                                            I'll switch to the 25.03 beta later this evening and re-run this test point.

                                            ☕️

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.