Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Aliases FQDN not regulary updated ?

    Scheduled Pinned Locked Moved 2.1 Snapshot Feedback and Problems - RETIRED
    3 Posts 2 Posters 1.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      dominique.fournier
      last edited by

      Hi,

      I defined some FQDN aliases in Hosts mode. The resolver change IP for the given name, but the alias table in pfctl didn't change (by pfctl -t APTUpdates -T show) .

      Could you give me the refresh time for this alias table ? on the Web page it is written 'periodically', but I couldn't find in code the refresh process. I found the URL refresh, but not for Hosts.

      It should be cool to add a log line for this each time the update is launched.

      Of course, if I click on the Web page on 'save' button, the table is refreshed.

      Thanks

      2.1 (amd64)

      1 Reply Last reply Reply Quote 0
      • jimpJ
        jimp Rebel Alliance Developer Netgate
        last edited by

        The filterdns daemon checks every 5 minutes and reloads the tables if it detects an IP change.

        Remember: Upvote with the šŸ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

        Need help fast? Netgate Global Support!

        Do not Chat/PM for help!

        1 Reply Last reply Reply Quote 0
        • D
          dominique.fournier
          last edited by

          EDIT : Sorry, I just found the bug in filterdns http://redmine.pfsense.org/issues/2506

          CLOSED !

          Thanks for your answer. I put it in debug mode and there is a problem :
          I have a table named 'APTUpdates' with servers needed to my Debian station to be joined for the updates.
          One entry is ftp.fr.debian.org which is actually reseolved by :
          $ host ftp.fr.debian.org
          ftp.fr.debian.org is an alias for ftp.oleane.net.
          ftp.oleane.net has address 194.2.0.36
          ftp.oleane.net has IPv6 address 2a01:c910:0:1::c202:24
          BTW, in the table,there is not the IPv6 entry :
          pfctl -t APTUpdates -T show
          Ā  67.205.85.245
          Ā  82.67.68.81
          Ā  82.195.75.97
          Ā  86.59.118.148
          Ā  86.59.118.153
          Ā  88.191.250.131
          Ā  91.189.88.33
          Ā  91.189.92.150
          Ā  91.189.92.151
          Ā  91.189.92.166
          Ā  91.189.92.167
          Ā  91.189.92.181
          Ā  91.189.92.184
          Ā  91.189.92.191
          Ā  128.31.0.51
          Ā  130.89.148.12
          Ā  130.89.148.13
          Ā  147.173.3.16
          Ā  158.255.96.2
          Ā  188.165.151.222
          Ā  194.2.0.36
          Ā  194.145.197.105
          Ā  195.20.242.89
          Ā  206.12.19.9
          Ā  212.211.132.32
          Ā  212.211.132.250
          Ā  2001:610:1908:b000::148:13
          Ā  2001:858:2:2::2
          Ā  2001:858:2:2:214:22ff:fe0d:7717
          Ā  2001:8d8:580:400:6564:a62:0:2
          Ā  2001:a78:5:0:216:35ff:fe7f:be4f
          Ā  2001:a78:5:1:216:35ff:fe7f:6ceb
          Ā  2001:41b8::/32
          Ā  2001:41b8:202:deb:1a1a:0:52c3:4b61
          Ā  2607:f8f0:610:4000:211:25ff:fec4:59ae
          Ā  2a01:e0c:1:1598::2

          Other thing in logs (egrep '(adding|clearing) entry' user.warning Ā | grep ftp.fr.debian.org) :
          Jul 31 11:03:46 pfsense1 filterdns: adding entry ::2a01:c910:0:1:0 to table APTUpdates on host ftp.fr.debian.org
          Jul 31 11:03:46 pfsense1 filterdns: clearing entry ::2a01:c910:0:1:0 from table APTUpdates on host ftp.fr.debian.org
          Jul 31 11:08:46 pfsense1 filterdns: adding entry ::2a01:c910:0:1:0 to table APTUpdates on host ftp.fr.debian.org
          Jul 31 11:08:46 pfsense1 filterdns: clearing entry ::2a01:c910:0:1:0 from table APTUpdates on host ftp.fr.debian.org

          The logs are strange too (for another server) : The :: is not at the right place…
          Jul 31 08:53:41 pfsense1 filterdns: adding entry ::2001:610:1908:b000:0 to table APTUpdates on host ftp.debian.org
          Jul 31 08:53:41 pfsense1 filterdns: found entry 0.0.130.89 for APTUpdates
          because ftp.debian.org has :
          : host ftp.debian.org
          ftp.debian.org has address 130.89.148.12
          ftp.debian.org has IPv6 address 2001:610:1908:b000::148:12

          Of course, as the update is incorrect, the packets are dropped...

          Thanks a lot

          2.1 (amd64)

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.