DNS resolver exiting when loading pfblocker 25.03.b.20250409.2208
-
@stephenw10 said in DNS resolver exiting when loading pfblocker 25.03.b.20250409.2208:
Nice. More fixes are incoming for various things.
The latest IPv6 RA patch has had no adverse consequences on my test setup.
Relative trivia but a very easy thing to fix with the 'various things':
2025-06-18 08:34:03.000000+01:00 nginx - 2025/06/18 08:34:03 [error] 333#100367: *9037 open() "/usr/local/www/apple-touch-icon.png" failed (2: No such file or directory), client: 2a02:xxx:xxxx:1:xxxx:xxxx:xxxx:b6bd, server: , request: "GET /apple-touch-icon.png HTTP/2.0", host: "router-7.xxxxxxx.me:8443" 2025-06-18 08:34:03.000000+01:00 nginx - 2025/06/18 08:34:03 [error] 333#100367: *9037 open() "/usr/local/www/apple-touch-icon-precomposed.png" failed (2: No such file or directory), client: 2a02:xxx:xxxx:1:xxxx:xxxx:xxxx:b6bd, server: , request: "GET /apple-touch-icon-precomposed.png HTTP/2.0", host: "router-7.xxxxxxx.me:8443"
️ -
What are you accessing from to generate those?
-
-
@stephenw10 said in DNS resolver exiting when loading pfblocker 25.03.b.20250409.2208:
What are you accessing from to generate those?
Just from a Mac.
The files exist on pfSense but are down a level in a sub-directory, rather than the usual location.
️ -
I don't see those specifically only:
[2.8.0-RELEASE][root@m370.stevew.lan]/root: ls -ls /usr/local/www/apple-touch/ total 26 5 -rw-r--r-- 1 root wheel 3669 May 20 15:25 apple-touch-icon-ipad-76x76-precomposed.png 9 -rw-r--r-- 1 root wheel 7260 May 20 15:25 apple-touch-icon-ipad-retina-152x152-precomposed.png 5 -rw-r--r-- 1 root wheel 2965 May 20 15:25 apple-touch-icon-iphone-60x60-precomposed.png 9 -rw-r--r-- 1 root wheel 5640 May 20 15:25 apple-touch-icon-iphone-retina-120x120-precomposed.pngSo those requests are from Safari in MacOS?
-
It expects to find the png files in this directory:
/root: ls /usr/local/www/ 404.html services_checkip_edit.php 50x.html services_dhcp.php android-chrome-192x192.png services_dhcp_edit.php android-chrome-512x512.png services_dhcp_relay.php apple-touch services_dhcp_settings.php [/snip]The Android/Chrome pngs are there but the Apple equivalents
apple-touch-icon.pngandapple-touch-icon-precomposed.pngare not, so it triggers the error in the logs. As you note, the iPhone and iPad pngs are in theapple-touchsub-directory.️ -
Right so seems like something missing that's (relatively) new. I asked internally since I don't run MacOS.
-
You are seeing this specifically when using Safari? We can't replicate that here so far. Everything we've tested just uses the correct path specified in the meta data.
-
OK we manage to replicate it. Weird that most things don't hit it. Digging....
-
@stephenw10 said in DNS resolver exiting when loading pfblocker 25.03.b.20250409.2208:
OK we manage to replicate it. Weird that most things don't hit it. Digging....
Good effort and yes, noticed the issue with Safari.
️ -
You have any plugins that might try to pull an icon to use? Password manager perhaps?
-
No plugins or password manager.
I do have 3 extensions though:
-
Stop The Madness (not really used with pfSense GUI)
-
Dark Reader (disabled for pfSense GUI)
-
AdGuard For Safari (disabled for pfSense GUI).
️ -
-
Hmm, does it only happen in Safari? Does it happen everytime you refresh the page? Any page?
Still trying to get more data points here. Seems like it must be something very specific.
-
Only happens on Safari (I only use Safari and Brave).
Seems like a common issue when I Googled it. This example is a bit dated though:
**If a user from Safari Web browser (Apple devices) visit your site. The browser tries to fetch the site icon if it is not defined in <head> in the following order:
apple-touch-icon-57x57-precomposed.png
apple-touch-icon-57x57.png
apple-touch-icon-precomposed.png
apple-touch-icon.pngTo resolve this issue either define an icon for safari web browsers or apple devices. Add something like this to head section of your site:
<link rel="apple-touch-icon" href="/custom_icon.png"/>
If you want to keep <head> clean then upload the icon to root dir of your site with proper name.You can find more details on iOS developer library.**
It also came up as a pfSense issue from back in the day:
https://redmine.pfsense.org/issues/6727
️ -
Right. Which is weird because it is defined in head.
-
@stephenw10
It only seems to happen when using macOS Touch ID to log into the pfSense GUI. More details in the Apple dev library, apparently.️ -
Aha, that's fun...
-
OK try the patch on the redmine if you can: https://redmine.pfsense.org/issues/6727#note-2
-
@stephenw10 said in DNS resolver exiting when loading pfblocker 25.03.b.20250409.2208:
OK try the patch on the redmine if you can: https://redmine.pfsense.org/issues/6727#note-2
Patched and did a quick log-out and log back in and all was well. I'll look at it in more detail tomorrow.
2025-06-20 22:24:58.167324+01:00 php-fpm 16657 /index.php: Successful login for user 'admin' from: 2a02: (Local Database) 2025-06-20 22:24:46.804428+01:00 php-fpm 3361 /index.php: User logged out for user 'admin' from: 2a02: (Local Database) 2025-06-20 22:23:39.104012+01:00 php-fpm 3361 System Patches: Patch applied successfully (ID: 6855d0f643a33, DESCR: macOS Touch ID png errors 6855d0f643a33 for 25.03.b.20250610.1659) 2025-06-20 22:23:20.811361+01:00 check_reload_status 625 Syncing firewall️ -
Thanks!
