Comcast IPv6 WAN address and delegated prefix added, then removed seconds later
-
I'm not having an issue getting a /60 allocated, that works fine, pfsense just removes it about 10 seconds after it receives it.
Further investigation indicates this is related to pfsense starting multiple instances of dhcp6c. I have no idea why this is happening, since I have only one WAN interface, but the longer pfsense runs, the more instances start. When I first found this, 8 instances of dhcp6c were running, after about 1 week of uptime. Every day or so now I loose IPv6 connectivity, and check and find that 2 or 3 instances are running, kill them, restart the wan interface and have IPv6 working again. IPv6 connectivity was stable for months at a time with 2.4.2, so I'm not sure what introduced this behavior.
-
Please try 2.4.4-p1
-
@derelict I updated to 2.4.4-p1 on Dec 5th, but it has not changed this behavior. Still accumulating dhcp6c instances.
-
Here is an example. It looks like I have accumulated a new dhcp6c instance every day for the last 3 days:
root 35864 0.0 0.0 6968 2804 - S 12:26 0:00.00 sh -c ps uxawww | grep dhcp6c 2>&1 root 36185 0.0 0.0 6564 2460 - S 12:26 0:00.00 grep dhcp6c root 41997 0.0 0.0 6340 2376 - Is 15:16 0:00.19 /usr/local/sbin/dhcp6c -d -n -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_igb0.pid igb0 root 54792 0.0 0.0 6340 2400 - Is Tue15 0:00.97 /usr/local/sbin/dhcp6c -d -n -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_igb0.pid igb0 root 77657 0.0 0.0 6340 2376 - Is Wed15 0:00.41 /usr/local/sbin/dhcp6c -d -n -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_igb0.pid igb0
Killing these and restarting the wan interface fixes IPv6, but I have to do this every day.
-
I'd be curious if the start time was the same every day.
Then I would look for any logs around that time. For instance around 15:16 Thursday when that last dhcp6c was started.
Not sure what Comcast might be doing. My Cox dhcp6c was started Dec19 - last time I restarted when I went to 2.4.4-p1.
-
After some digging around, it does appear that the start time is the same every day, and that it is about 1 minute after suricata downloads rule updates and restarts, which restarts each interface, followed by a large number of errors from various services. However, suricata updates 2 times per day, and the other update time doesn't result in new instances of dhcp6c.
Jan 8 15:15:02 php-cgi suricata_check_for_rule_updates.php: [Suricata] Emerging Threats Open rules are up to date... Jan 8 15:15:03 php-cgi suricata_check_for_rule_updates.php: [Suricata] There is a new set of Snort rules posted. Downloading snortrules-snapshot-3000.tar.gz... Jan 8 15:15:09 php-cgi suricata_check_for_rule_updates.php: [Suricata] Snort rules file update downloaded successfully. Jan 8 15:15:09 php-cgi suricata_check_for_rule_updates.php: [Suricata] There is a new set of Snort GPLv2 Community Rules posted. Downloading community-rules.tar.gz... Jan 8 15:15:11 php-cgi suricata_check_for_rule_updates.php: [Suricata] Snort GPLv2 Community Rules file update downloaded successfully. Jan 8 15:15:14 php-cgi suricata_check_for_rule_updates.php: [Suricata] Hide Deprecated Rules is enabled. Removing obsoleted rules categories. Jan 8 15:15:14 php-cgi suricata_check_for_rule_updates.php: [Suricata] Removed 0 obsoleted rules category files. Jan 8 15:15:14 php-cgi suricata_check_for_rule_updates.php: [Suricata] Updating rules configuration for: WAN ... Jan 8 15:15:16 php-cgi suricata_check_for_rule_updates.php: [Suricata] Enabling any flowbit-required rules for: WAN... Jan 8 15:15:16 php-cgi suricata_check_for_rule_updates.php: [Suricata] Building new sid-msg.map file for WAN... Jan 8 15:15:17 php-cgi suricata_check_for_rule_updates.php: [Suricata] Updating rules configuration for: LAN ... Jan 8 15:15:18 php-cgi suricata_check_for_rule_updates.php: [Suricata] Building new sid-msg.map file for LAN... Jan 8 15:15:18 php-cgi suricata_check_for_rule_updates.php: [Suricata] Updating rules configuration for: DMZ ... Jan 8 15:15:21 php-cgi suricata_check_for_rule_updates.php: [Suricata] Enabling any flowbit-required rules for: DMZ... Jan 8 15:15:21 php-cgi suricata_check_for_rule_updates.php: [Suricata] Building new sid-msg.map file for DMZ... Jan 8 15:15:22 php-cgi suricata_check_for_rule_updates.php: [Suricata] Updating rules configuration for: HIGH ... Jan 8 15:15:24 php-cgi suricata_check_for_rule_updates.php: [Suricata] Building new sid-msg.map file for HIGH... Jan 8 15:15:24 SuricataStartup 48900 Suricata STOP for WAN(29994_igb0)... Jan 8 15:15:27 SuricataStartup 50496 Suricata STOP for LAN(3843_igb1)... Jan 8 15:15:30 SuricataStartup 52010 Suricata STOP for OPT1(46180_igb2)... Jan 8 15:15:32 SuricataStartup 53231 Suricata STOP for OPT2(6509_igb3)... Jan 8 15:15:34 php-cgi suricata_check_for_rule_updates.php: [Suricata] Suricata has restarted with your new set of rules... Jan 8 15:15:34 php-cgi suricata_check_for_rule_updates.php: [Suricata] The Rules update has finished. Jan 8 15:15:34 SuricataStartup 56701 Suricata START for WAN(29994_igb0)... Jan 8 15:15:34 check_reload_status Syncing firewall Jan 8 15:15:35 SuricataStartup 57850 Suricata START for LAN(3843_igb1)... Jan 8 15:15:35 check_reload_status Linkup starting igb1 Jan 8 15:15:35 kernel igb1: link state changed to DOWN Jan 8 15:15:36 SuricataStartup 59161 Suricata START for OPT1(46180_igb2)... Jan 8 15:15:36 php-fpm 19656 /rc.linkup: DEVD Ethernet detached event for lan Jan 8 15:15:36 check_reload_status Reloading filter Jan 8 15:15:37 SuricataStartup 60711 Suricata START for OPT2(6509_igb3)... Jan 8 15:15:38 check_reload_status Linkup starting igb3 Jan 8 15:15:38 kernel igb3: link state changed to DOWN Jan 8 15:15:39 php-fpm 69962 /rc.linkup: DEVD Ethernet detached event for opt2 Jan 8 15:15:39 check_reload_status Reloading filter Jan 8 15:15:39 check_reload_status Linkup starting igb1 Jan 8 15:15:39 kernel igb1: link state changed to UP Jan 8 15:15:40 kernel igb0: link state changed to DOWN Jan 8 15:15:40 check_reload_status Linkup starting igb0 Jan 8 15:15:40 php-fpm 80125 /rc.linkup: DEVD Ethernet attached event for lan Jan 8 15:15:40 php-fpm 80125 /rc.linkup: HOTPLUG: Configuring interface lan Jan 8 15:15:41 php-fpm 76441 /rc.linkup: DEVD Ethernet detached event for wan Jan 8 15:15:41 check_reload_status Linkup starting igb1 Jan 8 15:15:41 kernel igb1: link state changed to DOWN Jan 8 15:15:41 dhcpleases /etc/hosts changed size from original! Jan 8 15:15:41 php-fpm 80125 /rc.linkup: Gateway, none 'available' for inet6, use the first one configured. 'WAN_DHCP6' Jan 8 15:15:41 check_reload_status Restarting ipsec tunnels Jan 8 15:15:41 check_reload_status Linkup starting igb3 Jan 8 15:15:41 kernel igb3: link state changed to UP Jan 8 15:15:42 php-fpm 75561 /rc.newwanipv6: rc.newwanipv6: Info: starting on igb0. Jan 8 15:15:42 php-fpm 75561 /rc.newwanipv6: rc.newwanipv6: No IPv6 address found for interface WAN [wan]. Jan 8 15:15:42 dhcpleases /etc/hosts changed size from original! Jan 8 15:15:42 dhcpleases Could not deliver signal HUP to process because its pidfile (/var/run/dnsmasq.pid) does not exist, No such process. Jan 8 15:15:42 php-fpm 75561 /rc.linkup: DEVD Ethernet attached event for opt2 Jan 8 15:15:42 php-fpm 75561 /rc.linkup: HOTPLUG: Configuring interface opt2 Jan 8 15:15:42 dhcpleases kqueue error: unkown Jan 8 15:15:42 dhcpleases Could not deliver signal HUP to process because its pidfile (/var/run/dnsmasq.pid) does not exist, No such process. Jan 8 15:15:42 check_reload_status Linkup starting igb3 Jan 8 15:15:42 kernel igb3: link state changed to DOWN Jan 8 15:15:42 php-fpm 75561 /rc.linkup: Default gateway setting Interface WAN_DHCP Gateway as default. Jan 8 15:15:42 php-fpm 75561 /rc.linkup: Gateway, none 'available' for inet6, use the first one configured. 'WAN_DHCP6' Jan 8 15:15:42 check_reload_status Restarting ipsec tunnels Jan 8 15:15:43 dhcpleases /etc/hosts changed size from original! Jan 8 15:15:43 check_reload_status Linkup starting igb0 Jan 8 15:15:43 kernel igb0: link state changed to UP Jan 8 15:15:43 dhcpleases kqueue error: unkown Jan 8 15:15:44 check_reload_status Linkup starting igb2 Jan 8 15:15:44 kernel igb2: link state changed to DOWN Jan 8 15:15:44 check_reload_status updating dyndns lan Jan 8 15:15:44 check_reload_status Reloading filter Jan 8 15:15:44 php-fpm 23478 /rc.linkup: DEVD Ethernet detached event for lan Jan 8 15:15:44 check_reload_status Reloading filter Jan 8 15:15:45 check_reload_status Linkup starting igb1 Jan 8 15:15:45 kernel igb1: link state changed to UP Jan 8 15:15:45 php-fpm 69962 /rc.linkup: DEVD Ethernet detached event for opt1 Jan 8 15:15:45 php-fpm 76441 /rc.linkup: Shutting down Router Advertisment daemon cleanly Jan 8 15:15:45 check_reload_status Reloading filter Jan 8 15:15:45 php-fpm 23478 /rc.linkup: DEVD Ethernet attached event for wan Jan 8 15:15:45 php-fpm 23478 /rc.linkup: HOTPLUG: Configuring interface wan Jan 8 15:15:46 check_reload_status Linkup starting igb0 Jan 8 15:15:46 kernel igb0: link state changed to DOWN Jan 8 15:15:46 php-fpm 76441 /rc.linkup: DEVD Ethernet attached event for lan Jan 8 15:15:46 php-fpm 76441 /rc.linkup: HOTPLUG: Configuring interface lan Jan 8 15:15:46 dhcpleases /etc/hosts changed size from original! Jan 8 15:15:46 php-fpm 76441 /rc.linkup: Gateway, none 'available' for inet6, use the first one configured. 'WAN_DHCP6' Jan 8 15:15:46 check_reload_status Restarting ipsec tunnels Jan 8 15:15:46 check_reload_status Linkup starting igb3 Jan 8 15:15:46 kernel igb3: link state changed to UP Jan 8 15:15:46 dhcpleases Could not deliver signal HUP to process because its pidfile (/var/run/dnsmasq.pid) does not exist, No such process. Jan 8 15:15:46 dhcpleases Could not deliver signal HUP to process because its pidfile (/var/run/dnsmasq.pid) does not exist, No such process. Jan 8 15:15:47 dhcpleases /etc/hosts changed size from original! Jan 8 15:15:47 dhcpleases Could not deliver signal HUP to process because its pidfile (/var/run/dnsmasq.pid) does not exist, No such process. Jan 8 15:15:47 dhcpleases kqueue error: unkown Jan 8 15:15:47 dhcpleases Could not deliver signal HUP to process because its pidfile (/var/run/dnsmasq.pid) does not exist, No such process. Jan 8 15:15:47 check_reload_status updating dyndns opt2 Jan 8 15:15:47 check_reload_status Reloading filter Jan 8 15:15:47 php-fpm 85465 /rc.linkup: DEVD Ethernet detached event for opt2 Jan 8 15:15:47 check_reload_status Reloading filter Jan 8 15:15:47 php-fpm 80125 /rc.linkup: DEVD Ethernet attached event for opt2 Jan 8 15:15:47 php-fpm 80125 /rc.linkup: HOTPLUG: Configuring interface opt2 Jan 8 15:15:47 check_reload_status Linkup starting igb2 Jan 8 15:15:47 kernel igb2: link state changed to UP Jan 8 15:15:47 php-fpm 80125 /rc.linkup: Gateway, none 'available' for inet6, use the first one configured. 'WAN_DHCP6' Jan 8 15:15:47 check_reload_status Restarting ipsec tunnels Jan 8 15:15:49 php-fpm 85465 /rc.linkup: DEVD Ethernet attached event for opt1 Jan 8 15:15:49 php-fpm 85465 /rc.linkup: HOTPLUG: Configuring interface opt1 Jan 8 15:15:49 dhcpleases /etc/hosts changed size from original! Jan 8 15:15:49 dhcpleases kqueue error: unkown Jan 8 15:15:49 check_reload_status Linkup starting igb2 Jan 8 15:15:49 kernel igb2: link state changed to DOWN Jan 8 15:15:49 php-fpm 85465 /rc.linkup: Gateway, none 'available' for inet, use the first one configured. 'WAN_DHCP' Jan 8 15:15:49 php-fpm 85465 /rc.linkup: Gateway, none 'available' for inet6, use the first one configured. 'WAN_DHCP6' Jan 8 15:15:49 check_reload_status Restarting ipsec tunnels Jan 8 15:15:49 dhcpleases Could not deliver signal HUP to process because its pidfile (/var/run/dnsmasq.pid) does not exist, No such process. Jan 8 15:15:49 dhcpleases Could not deliver signal HUP to process because its pidfile (/var/run/dnsmasq.pid) does not exist, No such process. Jan 8 15:15:49 check_reload_status Linkup starting igb0 Jan 8 15:15:49 kernel igb0: link state changed to UP Jan 8 15:15:50 check_reload_status updating dyndns lan Jan 8 15:15:50 dhcpleases /etc/hosts changed size from original! Jan 8 15:15:50 check_reload_status Reloading filter Jan 8 15:15:50 dhcpleases kqueue error: unkown Jan 8 15:15:52 check_reload_status updating dyndns opt2 Jan 8 15:15:52 check_reload_status Reloading filter Jan 8 15:15:52 check_reload_status Linkup starting igb2 Jan 8 15:15:52 kernel igb2: link state changed to UP Jan 8 15:15:53 check_reload_status rc.newwanip starting igb0 Jan 8 15:15:53 php-fpm 23478 /rc.linkup: calling interface_dhcpv6_configure. Jan 8 15:15:53 php-fpm 23478 /rc.linkup: Gateway, none 'available' for inet, use the first one configured. 'WAN_DHCP' Jan 8 15:15:53 php-fpm 23478 /rc.linkup: Gateway, none 'available' for inet6, use the first one configured. 'WAN_DHCP6' Jan 8 15:15:53 check_reload_status Restarting ipsec tunnels Jan 8 15:15:53 dhcpleases Could not deliver signal HUP to process because its pidfile (/var/run/dnsmasq.pid) does not exist, No such process. Jan 8 15:15:53 dhcpleases Could not deliver signal HUP to process because its pidfile (/var/run/dnsmasq.pid) does not exist, No such process. Jan 8 15:15:54 php-fpm 75561 /rc.newwanip: rc.newwanip: Info: starting on igb0. Jan 8 15:15:54 php-fpm 75561 /rc.newwanip: rc.newwanip: on (IP address: 107.3.175.60) (interface: WAN[wan]) (real interface: igb0). Jan 8 15:15:54 dhcpleases /etc/hosts changed size from original! Jan 8 15:15:54 dhcpleases Could not deliver signal HUP to process because its pidfile (/var/run/dnsmasq.pid) does not exist, No such process. Jan 8 15:15:54 check_reload_status updating dyndns opt1 Jan 8 15:15:54 check_reload_status Reloading filter Jan 8 15:15:54 php-fpm 39800 /rc.linkup: DEVD Ethernet detached event for opt1 Jan 8 15:15:54 dhcpleases kqueue error: unkown Jan 8 15:15:54 dhcpleases Could not deliver signal HUP to process because its pidfile (/var/run/dnsmasq.pid) does not exist, No such process. Jan 8 15:15:54 check_reload_status Reloading filter Jan 8 15:15:54 php-fpm 80125 /rc.linkup: DEVD Ethernet attached event for opt1 Jan 8 15:15:54 php-fpm 80125 /rc.linkup: HOTPLUG: Configuring interface opt1 Jan 8 15:15:54 php-fpm 80125 /rc.linkup: Gateway, none 'available' for inet, use the first one configured. 'WAN_DHCP' Jan 8 15:15:54 php-fpm 80125 /rc.linkup: Gateway, none 'available' for inet6, use the first one configured. 'WAN_DHCP6' Jan 8 15:15:54 check_reload_status Restarting ipsec tunnels Jan 8 15:15:54 rc.gateway_alarm 73171 >>> Gateway alarm: WAN_DHCP (Addr:107.3.174.1 Alarm:1 RTT:10.717ms RTTsd:3.105ms Loss:21%) Jan 8 15:15:54 check_reload_status updating dyndns WAN_DHCP Jan 8 15:15:54 check_reload_status Restarting ipsec tunnels Jan 8 15:15:54 check_reload_status Restarting OpenVPN tunnels/interfaces Jan 8 15:15:55 dhcpleases /etc/hosts changed size from original! Jan 8 15:15:56 dhcpleases kqueue error: unkown Jan 8 15:15:56 php-fpm 39800 /rc.dyndns.update: phpDynDNS (Home): No change in my IP address and/or 25 days has not passed. Not updating dynamic DNS entry. Jan 8 15:15:56 php-fpm 76441 /rc.openvpn: Gateway, none 'available' for inet, use the first one configured. 'WAN_DHCP' Jan 8 15:15:56 php-fpm 76441 /rc.openvpn: Gateway, none 'available' for inet6, use the first one configured. 'WAN_DHCP6' Jan 8 15:15:56 check_reload_status updating dyndns wan Jan 8 15:15:56 check_reload_status Reloading filter Jan 8 15:15:56 php-fpm 19656 /rc.linkup: DEVD Ethernet detached event for wan Jan 8 15:15:57 php-fpm 39800 /rc.dyndns.update: phpDynDNS (home.tancad.net): No change in my IP address and/or 25 days has not passed. Not updating dynamic DNS entry. Jan 8 15:15:58 php-fpm 39800 /rc.dyndns.update: Dynamic DNS (home.tancad.net) There was an error trying to determine the public IP for interface - wan (igb0 ). Jan 8 15:15:59 check_reload_status Reloading filter Jan 8 15:15:59 php-fpm 75561 /rc.newwanip: The command '/sbin/route delete -host 2606:4700:4700::1001' returned exit code '68', the output was 'route: bad address: 2606:4700:4700::1001' Jan 8 15:15:59 php-fpm 75561 /rc.newwanip: The command '/sbin/route delete -host 2606:4700:4700::1111' returned exit code '68', the output was 'route: bad address: 2606:4700:4700::1111' Jan 8 15:15:59 php-fpm 75561 /rc.newwanip: The command '/sbin/route delete -host 2001:4860:4860::8888' returned exit code '68', the output was 'route: bad address: 2001:4860:4860::8888' Jan 8 15:15:59 php-fpm 75561 /rc.newwanip: The command '/sbin/route delete -host 2001:4860:4860::8844' returned exit code '68', the output was 'route: bad address: 2001:4860:4860::8844' Jan 8 15:15:59 dhcpleases /etc/hosts changed size from original! Jan 8 15:15:59 php-fpm 75561 /rc.newwanip: Accept router advertisements on interface igb0 Jan 8 15:15:59 php-fpm 75561 /rc.newwanip: Starting rtsold process Jan 8 15:16:00 php-fpm 19656 /rc.linkup: Shutting down Router Advertisment daemon cleanly Jan 8 15:16:00 check_reload_status Reloading filter Jan 8 15:16:00 php-fpm 69962 /rc.linkup: DEVD Ethernet attached event for wan Jan 8 15:16:00 php-fpm 69962 /rc.linkup: HOTPLUG: Configuring interface wan Jan 8 15:16:00 check_reload_status rc.newwanip starting igb0 Jan 8 15:16:00 php-fpm 69962 /rc.linkup: calling interface_dhcpv6_configure. Jan 8 15:16:00 php-fpm 69962 /rc.linkup: Gateway, none 'available' for inet, use the first one configured. 'WAN_DHCP' Jan 8 15:16:00 php-fpm 69962 /rc.linkup: Gateway, none 'available' for inet6, use the first one configured. 'WAN_DHCP6' Jan 8 15:16:00 check_reload_status Restarting ipsec tunnels Jan 8 15:16:01 php-fpm 85465 /rc.newwanip: rc.newwanip: Info: starting on igb0. Jan 8 15:16:01 php-fpm 85465 /rc.newwanip: rc.newwanip: on (IP address: 107.3.175.60) (interface: WAN[wan]) (real interface: igb0). Jan 8 15:16:01 dhcpleases /etc/hosts changed size from original! Jan 8 15:16:01 dhcpleases Could not deliver signal HUP to process because its pidfile (/var/run/dnsmasq.pid) does not exist, No such process. Jan 8 15:16:01 dhcpleases kqueue error: unkown Jan 8 15:16:01 dhcpleases Could not deliver signal HUP to process because its pidfile (/var/run/dnsmasq.pid) does not exist, No such process. Jan 8 15:16:01 rtsold 58822 <interface_up> igb0 does not accept Router Advertisement. Jan 8 15:16:03 php-fpm 75561 /rc.newwanip: Gateway, none 'available' for inet6, use the first one configured. 'WAN_DHCP6' Jan 8 15:16:03 check_reload_status updating dyndns wan Jan 8 15:16:03 check_reload_status Reloading filter Jan 8 15:16:05 php-fpm 39800 /rc.dyndns.update: phpDynDNS (Home): No change in my IP address and/or 25 days has not passed. Not updating dynamic DNS entry. Jan 8 15:16:06 php-fpm 75561 /rc.newwanip: phpDynDNS (Home): No change in my IP address and/or 25 days has not passed. Not updating dynamic DNS entry. Jan 8 15:16:06 php-fpm 39800 /rc.dyndns.update: phpDynDNS (home.tancad.net): No change in my IP address and/or 25 days has not passed. Not updating dynamic DNS entry. Jan 8 15:16:06 php-fpm 85465 /rc.newwanip: The command '/sbin/route delete -host 2606:4700:4700::1001' returned exit code '68', the output was 'route: bad address: 2606:4700:4700::1001' Jan 8 15:16:06 php-fpm 85465 /rc.newwanip: The command '/sbin/route delete -host 2606:4700:4700::1111' returned exit code '68', the output was 'route: bad address: 2606:4700:4700::1111' Jan 8 15:16:06 php-fpm 85465 /rc.newwanip: The command '/sbin/route delete -host 2001:4860:4860::8888' returned exit code '68', the output was 'route: bad address: 2001:4860:4860::8888' Jan 8 15:16:06 php-fpm 85465 /rc.newwanip: The command '/sbin/route delete -host 2001:4860:4860::8844' returned exit code '68', the output was 'route: bad address: 2001:4860:4860::8844' Jan 8 15:16:06 dhcpleases /etc/hosts changed size from original! Jan 8 15:16:06 php-fpm 85465 /rc.newwanip: Accept router advertisements on interface igb0 Jan 8 15:16:06 php-fpm 85465 /rc.newwanip: Starting rtsold process Jan 8 15:16:07 php-fpm 39800 /rc.dyndns.update: Dynamic DNS (home.tancad.net) There was an error trying to determine the public IP for interface - wan (igb0 ). Jan 8 15:16:07 php-fpm 75561 /rc.newwanip: phpDynDNS (home.tancad.net): No change in my IP address and/or 25 days has not passed. Not updating dynamic DNS entry. Jan 8 15:16:08 php-fpm 75561 /rc.newwanip: Dynamic DNS (home.tancad.net) There was an error trying to determine the public IP for interface - wan (igb0 ). Jan 8 15:16:09 php-fpm 75561 /rc.newwanip: Resyncing OpenVPN instances for interface WAN. Jan 8 15:16:09 php-fpm 75561 /rc.newwanip: Creating rrd update script Jan 8 15:16:09 rtsold Received RA specifying route fe80::201:5cff:fe87:fe46 for interface wan(igb0) Jan 8 15:16:09 rtsold Starting dhcp6 client for interface wan(igb0) Jan 8 15:16:10 php-fpm 85465 /rc.newwanip: Gateway, none 'available' for inet6, use the first one configured. 'WAN_DHCP6' Jan 8 15:16:11 php-fpm 75561 /rc.newwanip: pfSense package system has detected an IP change or dynamic WAN reconnection - 107.3.175.60 -> 107.3.175.60 - Restarting packages. Jan 8 15:16:11 check_reload_status Starting packages Jan 8 15:16:12 php-fpm 85465 /rc.newwanip: phpDynDNS (Home): No change in my IP address and/or 25 days has not passed. Not updating dynamic DNS entry. Jan 8 15:16:12 php-fpm 76441 /rc.start_packages: Restarting/Starting all packages. Jan 8 15:16:13 php-fpm 85465 /rc.newwanip: phpDynDNS (home.tancad.net): No change in my IP address and/or 25 days has not passed. Not updating dynamic DNS entry. Jan 8 15:16:14 php-fpm 85465 /rc.newwanip: Dynamic DNS (home.tancad.net) There was an error trying to determine the public IP for interface - wan (igb0 ). Jan 8 15:16:15 php-fpm 85465 /rc.newwanip: Resyncing OpenVPN instances for interface WAN. Jan 8 15:16:15 php-fpm 85465 /rc.newwanip: Creating rrd update script Jan 8 15:16:17 php-fpm 85465 /rc.newwanip: pfSense package system has detected an IP change or dynamic WAN reconnection - 107.3.175.60 -> 107.3.175.60 - Restarting packages. Jan 8 15:16:17 check_reload_status Starting packages Jan 8 15:16:18 php-fpm 80125 /rc.start_packages: Skipping STARTing packages process because previous/another instance is already running Jan 8 15:16:35 ntopng [HTTPserver.cpp:924] ERROR: [HTTP] set_ports_option: cannot bind to 3000s: Address already in use Jan 8 15:16:35 ntopng [mongoose.c:4584] ERROR: set_ports_option: cannot bind to 3000s: No error: 0 Jan 8 15:16:35 ntopng [HTTPserver.cpp:1104] ERROR: Unable to start HTTP server (IPv4) on ports 3000s Jan 8 15:16:35 ntopng [HTTPserver.cpp:1110] ERROR: Either port in use or another ntopng instance is running (using the same port) Jan 8 15:16:54 php-fpm 76441 [pfBlockerNG] Starting cron process. Jan 8 15:16:54 php-fpm 76441 /rc.start_packages: The command '/sbin/ifconfig 'igb1' delete '10.10.10.1'' returned exit code '1', the output was 'ifconfig: ioctl (SIOCDIFADDR): Can't assign requested address' Jan 8 15:16:54 check_reload_status Reloading filter Jan 8 15:16:55 radiusd 12401 Signalled to terminate Jan 8 15:16:55 radiusd 12401 Exiting normally Jan 8 15:16:55 radiusd 2646 Debugger not attached Jan 8 15:16:55 radiusd 13110 [/usr/local/etc/raddb/mods-config/attr_filter/access_reject]:11 Check item "FreeRADIUS-Response-Delay" found in filter list for realm "DEFAULT". Jan 8 15:16:55 radiusd 13110 [/usr/local/etc/raddb/mods-config/attr_filter/access_reject]:11 Check item "FreeRADIUS-Response-Delay-USec" found in filter list for realm "DEFAULT". Jan 8 15:16:55 radiusd 13110 Loaded virtual server <default> Jan 8 15:16:55 radiusd 13110 Loaded virtual server default Jan 8 15:16:55 radiusd 13110 Ignoring "sql" (see raddb/mods-available/README.rst) Jan 8 15:16:55 radiusd 13110 Ignoring "ldap" (see raddb/mods-available/README.rst) Jan 8 15:16:55 radiusd 13110 Loaded virtual server inner-tunnel-ttls Jan 8 15:16:55 radiusd 13110 Loaded virtual server inner-tunnel-peap Jan 8 15:16:55 radiusd 13110 Ready to process requests Jan 8 15:16:56 ntopng [HTTPserver.cpp:924] ERROR: [HTTP] set_ports_option: cannot bind to 3000s: Address already in use Jan 8 15:16:56 ntopng [mongoose.c:4584] ERROR: set_ports_option: cannot bind to 3000s: No error: 0 Jan 8 15:16:56 ntopng [HTTPserver.cpp:1104] ERROR: Unable to start HTTP server (IPv4) on ports 3000s Jan 8 15:16:56 ntopng [HTTPserver.cpp:1110] ERROR: Either port in use or another ntopng instance is running (using the same port) Jan 8 15:17:42 kernel pid 50390 (ntopng), uid 0: exited on signal 11 (core dumped) Jan 8 15:17:42 kernel igb1: promiscuous mode disabled Jan 8 15:17:42 kernel igb2: promiscuous mode disabled Jan 8 15:17:42 kernel igb3: promiscuous mode disabled
-
@rohrej
If Suricata does not actually update the rules, then it won't restart the interface. It checks for updates multiple times per day (as per the setting in GLOBAL SETTINGS), but it does not really download a new file unless the md5 checksums indicate a new rules file is posted. It will only restart itself (Suricata, that is) when a new file is downloaded and new rules are installed.Restarting Suricata, especially in Netmap IPS mode, will cycle an interface.
-
That makes sense that it would only restart the interfaces if there is actually a new ruleset. However, restarting the interfaces should not cause multiple dhcp6c instances to run simultaneously.
-
@rohrej said in Comcast IPv6 WAN address and delegated prefix added, then removed seconds later:
That makes sense that it would only restart the interfaces if there is actually a new ruleset. However, restarting the interfaces should not cause multiple dhcp6c instances to run simultaneously.
Agreed. This might be a problem with the way the daemon is handled when an interface cycles. Is pfSense terminating the running process before launching another, or does it perhaps just blindly start a new daemon instance when the interface comes up? I have not examined the code, so I'm not sure. Just throwing the question out there for consideration.
-
So, turning off suricata for the WAN interface did not fix this. It doesn't happen every day now, but still pretty often.
root 2183 0.0 0.0 6340 2380 - Is 21Jan19 0:02.81 /usr/local/sbin/dhcp6c -d -n -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_igb0.pid igb0 root 11215 0.0 0.0 6340 2376 - Is 27Jan19 0:01.57 /usr/local/sbin/dhcp6c -d -n -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_igb0.pid igb0 root 13704 0.0 0.0 6968 2804 - S 18:53 0:00.00 sh -c ps uxawww | grep dhcp6c 2>&1 root 14116 0.0 0.0 6564 2460 - S 18:53 0:00.00 grep dhcp6c root 38355 0.0 0.0 6340 2400 - Ss 19Jan19 0:11.03 /usr/local/sbin/dhcp6c -d -n -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_igb0.pid igb0 root 41023 0.0 0.0 6340 2376 - Is 15:15 0:00.04 /usr/local/sbin/dhcp6c -d -n -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_igb0.pid igb0 root 60339 0.0 0.0 6340 2376 - Ss 22Jan19 0:02.64 /usr/local/sbin/dhcp6c -d -n -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_igb0.pid igb0 root 83791 0.0 0.0 6340 2376 - Is 24Jan19 0:02.28 /usr/local/sbin/dhcp6c -d -n -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_igb0.pid igb0 root 98049 0.0 0.0 6340 2380 - Is Thu03 0:00.79 /usr/local/sbin/dhcp6c -d -n -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_igb0.pid igb0