Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    pfblockerng-dev restarts unbound but DNSBL is disabled

    Scheduled Pinned Locked Moved pfBlockerNG
    21 Posts 5 Posters 3.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • RonpfSR
      RonpfS @elmnts
      last edited by

      @elmnts Maybe post the pfblockng.log so we can see what it does during Cron Update.

      2.4.5-RELEASE-p1 (amd64)
      Intel Core2 Quad CPU Q8400 @ 2.66GHz 8GB
      Backup 0.5_5, Bandwidthd 0.7.4_4, Cron 0.3.7_5, pfBlockerNG-devel 3.0.0_16, Status_Traffic_Totals 2.3.1_1, System_Patches 1.2_5

      E 1 Reply Last reply Reply Quote 0
      • E
        elmnts @RonpfS
        last edited by

        @ronpfs I attached the pfblockerng.log. I change the execution time for the cron job to 7:15 pm tho.

        CRON  PROCESS  START [ v3.0.0_8 ] [ 01/09/21 19:15:00 ]
        [ Abuse_Feodo_C2_v4 ]
          Remote timestamp: Sat, 09 Jan 2021 18:10:03 GMT
          Local  timestamp: Sat, 09 Jan 2021 17:25:03 GMT	Update found
        [ Abuse_SSLBL_v4 ]
          Remote timestamp: Sat, 09 Jan 2021 18:10:02 GMT
          Local  timestamp: Sat, 09 Jan 2021 17:25:03 GMT	Update found
        [ CINS_army_v4 ]
          Remote timestamp: Sat, 09 Jan 2021 17:18:44 GMT
          Local  timestamp: Sat, 09 Jan 2021 16:18:42 GMT	Update found
        [ ET_Block_v4 ]
          Remote timestamp: Fri, 08 Jan 2021 23:18:59 GMT
          Local  timestamp: Fri, 08 Jan 2021 05:30:02 GMT	Update found
        [ ET_Comp_v4 ] [ 01/09/21 19:15:01 ]
          Remote timestamp: Fri, 08 Jan 2021 23:18:24 GMT
          Local  timestamp: Fri, 08 Jan 2021 05:30:23 GMT	Update found
        [ ISC_1000_30_v4 ] [ 01/09/21 19:15:02 ]
          Remote timestamp: Sat, 09 Jan 2021 18:14:03 GMT
          Local  timestamp: Sat, 09 Jan 2021 15:13:22 GMT	Update found
        [ ISC_Block_v4 ] [ 01/09/21 19:15:03 ]
          Remote timestamp: Sat, 09 Jan 2021 18:14:03 GMT
          Local  timestamp: Sat, 09 Jan 2021 16:00:06 GMT	Update found
        [ Spamhaus_Drop_v4 ] [ 01/09/21 19:15:04 ]
          Remote timestamp: Sat, 09 Jan 2021 00:28:34 GMT
          Local  timestamp: Sat, 09 Jan 2021 00:28:34 GMT	Update not required
        [ Spamhaus_eDrop_v4 ]
          Remote timestamp: Wed, 30 Dec 2020 21:14:18 GMT
          Local  timestamp: Wed, 30 Dec 2020 21:14:18 GMT	Update not required
        [ BlockListDE_Apache_v4 ]
          Remote timestamp: Sat, 09 Jan 2021 17:50:29 GMT
          Local  timestamp: Sat, 09 Jan 2021 17:09:05 GMT	Update found
        [ BlockListDE_Asterisk_v4 ]
          Remote timestamp: Sat, 09 Jan 2021 17:50:38 GMT
          Local  timestamp: Sat, 09 Jan 2021 17:09:13 GMT	Update found
        [ BlockListDE_Bots_v4 ]
          Remote timestamp: Sat, 09 Jan 2021 17:50:38 GMT
          Local  timestamp: Sat, 09 Jan 2021 17:09:13 GMT	Update found
        [ BlockListDE_Brute_v4 ] [ 01/09/21 19:15:05 ]
          Remote timestamp: Sat, 09 Jan 2021 17:50:44 GMT
          Local  timestamp: Sat, 09 Jan 2021 17:09:24 GMT	Update found
        [ BlockListDE_Email_v4 ]
          Remote timestamp: Sat, 09 Jan 2021 17:50:24 GMT
          Local  timestamp: Sat, 09 Jan 2021 17:09:01 GMT	Update found
        [ BlockListDE_FTP_v4 ]
          Remote timestamp: Sat, 09 Jan 2021 17:50:37 GMT
          Local  timestamp: Sat, 09 Jan 2021 17:09:12 GMT	Update found
        [ BlockListDE_FTPD_v4 ]
          Remote timestamp: Sat, 09 Jan 2021 17:50:37 GMT
          Local  timestamp: Sat, 09 Jan 2021 17:09:12 GMT	Update found
        [ BlockListDE_IMAP_v4 ]
          Remote timestamp: Sat, 09 Jan 2021 17:50:36 GMT
          Local  timestamp: Sat, 09 Jan 2021 17:09:11 GMT	Update found
        [ BlockListDE_IRC_v4 ]
          Remote timestamp: Sat, 09 Jan 2021 17:50:40 GMT
          Local  timestamp: Sat, 09 Jan 2021 17:09:19 GMT	Update found
        [ BlockListDE_Mail_v4 ] [ 01/09/21 19:15:06 ]
          Remote timestamp: Sat, 09 Jan 2021 17:50:24 GMT
          Local  timestamp: Sat, 09 Jan 2021 17:09:01 GMT	Update found
        [ BlockListDE_POP3_v4 ]
          Remote timestamp: Sat, 09 Jan 2021 17:50:36 GMT
          Local  timestamp: Sat, 09 Jan 2021 17:09:11 GMT	Update found
        [ BlockListDE_Postfix_v4 ]
          Remote timestamp: Sat, 09 Jan 2021 17:50:24 GMT
          Local  timestamp: Sat, 09 Jan 2021 17:09:01 GMT	Update found
        [ BlockListDE_SIP_v4 ]
          Remote timestamp: Sat, 09 Jan 2021 17:50:38 GMT
          Local  timestamp: Sat, 09 Jan 2021 17:09:13 GMT	Update found
        [ BlockListDE_SSH_v4 ]
          Remote timestamp: Sat, 09 Jan 2021 17:50:19 GMT
          Local  timestamp: Sat, 09 Jan 2021 17:08:59 GMT	Update found
        [ BlockListDE_Strong_v4 ]
          Remote timestamp: Sat, 09 Jan 2021 17:50:39 GMT
          Local  timestamp: Sat, 09 Jan 2021 17:09:16 GMT	Update found
        [ BDS_Ban_v4 ]
          Remote timestamp: Sat, 09 Jan 2021 17:34:01 GMT
          Local  timestamp: Sat, 09 Jan 2021 16:34:00 GMT	Update found
        [ BlockListDE_All_v4 ] [ 01/09/21 19:15:07 ]
          Remote timestamp: Sat, 09 Jan 2021 17:50:05 GMT
          Local  timestamp: Sat, 09 Jan 2021 17:08:46 GMT	Update found
        [ MS_1_v4 ]
        				( md5 feed )		. 200 OK
        				( md5 unchanged )	Update not required
         UPDATE PROCESS START [ v3.0.0_8 ] [ 01/09/21 19:15:08 ]
        
        ===[  DNSBL Process  ]================================================
        
        Clearing all DNSBL Feeds
        Stopping Unbound Resolver.
        Unbound stopped in 2 sec.
        Additional mounts:
          No changes required.
        Starting Unbound Resolver... completed [ 01/09/21 19:15:09 ]
        DNSBL is disabled
        
        
        ===[  GeoIP Process  ]============================================
        
        [ pfB_Europe_v4 ]		 exists.
        
        ===[  IPv4 Process  ]=================================================
        
        [ Whitelist_custom_v4 ]		 exists.
        [ Abuse_Feodo_C2_v4 ]		 Downloading update .. 200 OK. completed ..
          ------------------------------
          Original Master     Final     
          ------------------------------
          1412     1412       1412        [ Pass ] 
          -----------------------------------------------------------------
        
        [ Abuse_SSLBL_v4 ]		 Downloading update [ 01/09/21 19:15:10 ] .. 200 OK. completed ..
          ------------------------------
          Original Master     Final     
          ------------------------------
          129      100        100         [ Pass ] 
          -----------------------------------------------------------------
        
        [ CINS_army_v4 ]		 Downloading update .. 200 OK. completed ..
          ------------------------------
          Original Master     Final     
          ------------------------------
          15000    14450      14450       [ Pass ] 
          -----------------------------------------------------------------
        
        [ ET_Block_v4 ]			 Downloading update [ 01/09/21 19:15:11 ] .. 200 OK. completed ..
          ------------------------------
          Original Master     Final     
          ------------------------------
          2377     1009       1009        [ Pass ] 
          -----------------------------------------------------------------
        
        [ ET_Comp_v4 ]			 Downloading update [ 01/09/21 19:15:12 ] .. 200 OK. completed ..
          ------------------------------
          Original Master     Final     
          ------------------------------
          4227     3971       3971        [ Pass ] 
          -----------------------------------------------------------------
        
        [ ISC_1000_30_v4 ]		 Downloading update [ 01/09/21 19:15:13 ] .. 200 OK. completed ..
          ------------------------------
          Original Master     Final     
          ------------------------------
          8003     787        787         [ Pass ] 
          -----------------------------------------------------------------
        
        [ ISC_Block_v4 ]		 Downloading update [ 01/09/21 19:15:14 ] .. 200 OK. completed ..
          ------------------------------
          Original Master     Final     
          ------------------------------
          21       14         14          [ Pass ] 
          -----------------------------------------------------------------
        
        [ Spamhaus_Drop_v4 ]		 exists. [ 01/09/21 19:15:15 ]
        [ Spamhaus_eDrop_v4 ]		 exists.
        [ BlockListDE_Apache_v4 ]	 Downloading update .. 200 OK. completed ..
          ------------------------------
          Original Master     Final     
          ------------------------------
          9985     1991       1991        [ Pass ] 
          -----------------------------------------------------------------
        
        [ BlockListDE_Asterisk_v4 ]	 Downloading update [ 01/09/21 19:15:16 ] .. 200 OK. completed ..
          ------------------------------
          Original Master     Final     
          ------------------------------
          500      173        173         [ Pass ] 
          -----------------------------------------------------------------
        
        [ BlockListDE_Bots_v4 ]		 Downloading update .. 200 OK. completed ..
          ------------------------------
          Original Master     Final     
          ------------------------------
          37       32         32          [ Pass ] 
          -----------------------------------------------------------------
        
        [ BlockListDE_Brute_v4 ]	 Downloading update .. 200 OK. completed ..
          ------------------------------
          Original Master     Final     
          ------------------------------
          1919     1          1           [ Pass ] 
          -----------------------------------------------------------------
        
        [ BlockListDE_Email_v4 ]	 Downloading update [ 01/09/21 19:15:17 ] .. 200 OK. completed ..
          ------------------------------
          Original Master     Final     
          ------------------------------
          12766    4498       4498        [ Pass ] 
          -----------------------------------------------------------------
        
        [ BlockListDE_FTP_v4 ]		 Downloading update .. 200 OK. completed ..
          ------------------------------
          Original Master     Final     
          ------------------------------
          112      109        109         [ Pass ] 
          -----------------------------------------------------------------
        
        [ BlockListDE_FTPD_v4 ]		 Downloading update [ 01/09/21 19:15:18 ] .. 200 OK. completed ..
          ------------------------------
          Original Master     Final     
          ------------------------------
          112      0          0           [ Pass ] 
          -----------------------------------------------------------------
        
        [ BlockListDE_IMAP_v4 ]		 Downloading update .. 200 OK. completed ..
          ------------------------------
          Original Master     Final     
          ------------------------------
          2823     0          0           [ Pass ] 
          -----------------------------------------------------------------
        
        [ BlockListDE_IRC_v4 ]		 Downloading update .. 200 OK. completed ..
          Empty file, Adding '127.1.7.7' to avoid download failure.
          ------------------------------
          Original Master     Final     
          ------------------------------
          0        1          1           [ Pass ] 
          -----------------------------------------------------------------
        
        [ BlockListDE_Mail_v4 ]		 Downloading update [ 01/09/21 19:15:19 ] .. 200 OK. completed ..
          ------------------------------
          Original Master     Final     
          ------------------------------
          12766    0          0           [ Pass ] 
          -----------------------------------------------------------------
        
        [ BlockListDE_POP3_v4 ]		 Downloading update .. 200 OK. completed ..
          ------------------------------
          Original Master     Final     
          ------------------------------
          2823     0          0           [ Pass ] 
          -----------------------------------------------------------------
        
        [ BlockListDE_Postfix_v4 ]	 Downloading update [ 01/09/21 19:15:20 ] .. 200 OK. completed ..
          ------------------------------
          Original Master     Final     
          ------------------------------
          12766    0          0           [ Pass ] 
          -----------------------------------------------------------------
        
        [ BlockListDE_SIP_v4 ]		 Downloading update .. 200 OK. completed ..
          ------------------------------
          Original Master     Final     
          ------------------------------
          500      2          2           [ Pass ] 
          -----------------------------------------------------------------
        
        [ BlockListDE_SSH_v4 ]		 Downloading update [ 01/09/21 19:15:21 ] .. 200 OK. completed ..
          ------------------------------
          Original Master     Final     
          ------------------------------
          32325    29489      29489       [ Pass ] 
          -----------------------------------------------------------------
        
        [ BlockListDE_Strong_v4 ]	 Downloading update .. 200 OK. completed ..
          ------------------------------
          Original Master     Final     
          ------------------------------
          1293     103        103         [ Pass ] 
          -----------------------------------------------------------------
        
        [ BDS_Ban_v4 ]			 Downloading update [ 01/09/21 19:15:22 ] .. 200 OK. completed ..
          ------------------------------
          Original Master     Final     
          ------------------------------
          1437     926        926         [ Pass ] 
          -----------------------------------------------------------------
        
        [ BlockListDE_All_v4 ]		 Downloading update [ 01/09/21 19:15:23 ] .. 200 OK. completed ..
          ------------------------------
          Original Master     Final     
          ------------------------------
          47763    771        771         [ Pass ] 
          -----------------------------------------------------------------
        
        [ MS_1_v4 ]			 exists.
        ===[ Suppression Stats ]===================================
        
        List                 Pre        Suppress   Master    
        -----------------------------------------------------------
        Abuse_Feodo_C2_v4    1412       1412       62681     
        Abuse_SSLBL_v4       100        100        62681     
        CINS_army_v4         14450      14450      62681     
        ET_Block_v4          1009       1009       62681     
        ET_Comp_v4           3971       3971       62681     
        ISC_1000_30_v4       787        787        62681     
        ISC_Block_v4         14         14         62681     
        Spamhaus_Drop_v4     1          1          62681     
        Spamhaus_eDrop_v4    78         78         62681     
        BlockListDE_Apache_v4 1991       1991       62681     
        BlockListDE_Asterisk_v4 173        173        62681     
        BlockListDE_Bots_v4  32         32         62681     
        BlockListDE_Brute_v4 1          1          62681     
        BlockListDE_Email_v4 4498       4498       62681     
        BlockListDE_FTP_v4   109        109        62681     
        BlockListDE_FTPD_v4  1          1          62681     
        BlockListDE_IMAP_v4  1          1          62681     
        BlockListDE_IRC_v4   1          1          62681     
        BlockListDE_Mail_v4  1          1          62681     
        BlockListDE_POP3_v4  1          1          62681     
        BlockListDE_Postfix_v4 1          1          62681     
        BlockListDE_SIP_v4   2          2          62681     
        BlockListDE_SSH_v4   29489      29489      62681     
        BlockListDE_Strong_v4 103        103        62681     
        BDS_Ban_v4           926        926        62681     
        BlockListDE_All_v4   771        771        62681     
        
        
        ===[  Aliastables / Rules  ]==========================================
        
        No changes to Firewall rules, skipping Filter Reload
        
         Updating: pfB_PRI1_v4
        200 addresses added.220 addresses deleted.
         Updating: pfB_BlockListDE_v4
        401 addresses added.275 addresses deleted.
         Updating: pfB_PRI4_v4
        17 addresses added.2 addresses deleted.
         Updating: pfB_PRI3_v4
        12 addresses added.
        
        ===[  Kill States  ]==================================================
        
        Firewall state(s) validation for [ 94 ] IPv4 address(es)...
        No matching states found
        
        ======================================================================
        
        ===[ FINAL Processing ]=====================================
        
           [ Original IP count   ]  [ 194619 ]
        
           [ Final IP Count  ]  [ 62681 ]
        
        
        ===[ Permit List IP Counts ]=========================
        
           19594 total
           19593 /var/db/pfblockerng/permit/pfB_Europe_v4.txt
               1 /var/db/pfblockerng/permit/Whitelist_custom_v4.txt
        
        ===[ Deny List IP Counts ]===========================
        
           62687 total
           29489 /var/db/pfblockerng/deny/BlockListDE_SSH_v4.txt
           14450 /var/db/pfblockerng/deny/CINS_army_v4.txt
            4498 /var/db/pfblockerng/deny/BlockListDE_Email_v4.txt
            3971 /var/db/pfblockerng/deny/ET_Comp_v4.txt
            2764 /var/db/pfblockerng/deny/MS_1_v4.txt
            1991 /var/db/pfblockerng/deny/BlockListDE_Apache_v4.txt
            1412 /var/db/pfblockerng/deny/Abuse_Feodo_C2_v4.txt
            1009 /var/db/pfblockerng/deny/ET_Block_v4.txt
             926 /var/db/pfblockerng/deny/BDS_Ban_v4.txt
             787 /var/db/pfblockerng/deny/ISC_1000_30_v4.txt
             771 /var/db/pfblockerng/deny/BlockListDE_All_v4.txt
             173 /var/db/pfblockerng/deny/BlockListDE_Asterisk_v4.txt
             109 /var/db/pfblockerng/deny/BlockListDE_FTP_v4.txt
             103 /var/db/pfblockerng/deny/BlockListDE_Strong_v4.txt
             100 /var/db/pfblockerng/deny/Abuse_SSLBL_v4.txt
              78 /var/db/pfblockerng/deny/Spamhaus_eDrop_v4.txt
              32 /var/db/pfblockerng/deny/BlockListDE_Bots_v4.txt
              14 /var/db/pfblockerng/deny/ISC_Block_v4.txt
               2 /var/db/pfblockerng/deny/BlockListDE_SIP_v4.txt
               1 /var/db/pfblockerng/deny/Spamhaus_Drop_v4.txt
               1 /var/db/pfblockerng/deny/BlockListDE_Postfix_v4.txt
               1 /var/db/pfblockerng/deny/BlockListDE_POP3_v4.txt
               1 /var/db/pfblockerng/deny/BlockListDE_Mail_v4.txt
               1 /var/db/pfblockerng/deny/BlockListDE_IRC_v4.txt
               1 /var/db/pfblockerng/deny/BlockListDE_IMAP_v4.txt
               1 /var/db/pfblockerng/deny/BlockListDE_FTPD_v4.txt
               1 /var/db/pfblockerng/deny/BlockListDE_Brute_v4.txt
        
        ====================[ Empty Lists w/127.1.7.7 ]==================
        
        BlockListDE_FTPD_v4.txt
        BlockListDE_IMAP_v4.txt
        BlockListDE_IRC_v4.txt
        BlockListDE_Mail_v4.txt
        BlockListDE_POP3_v4.txt
        BlockListDE_Postfix_v4.txt
        Spamhaus_Drop_v4.txt
        
        ====================[ IPv4/6 Last Updated List Summary ]==============
        
        Apr 30	2020	MS_1_v4
        Dec 30	22:14	Spamhaus_eDrop_v4
        Jan 8	17:11	pfB_Europe_v4
        Jan 8	17:11	Whitelist_custom_v4
        Jan 9	00:18	ET_Comp_v4
        Jan 9	00:18	ET_Block_v4
        Jan 9	01:28	Spamhaus_Drop_v4
        Jan 9	15:28	ISC_1000_30_v4
        Jan 9	16:28	ISC_Block_v4
        Jan 9	18:18	CINS_army_v4
        Jan 9	18:34	BDS_Ban_v4
        Jan 9	18:50	BlockListDE_All_v4
        Jan 9	18:50	BlockListDE_SSH_v4
        Jan 9	18:50	BlockListDE_Postfix_v4
        Jan 9	18:50	BlockListDE_Mail_v4
        Jan 9	18:50	BlockListDE_Email_v4
        Jan 9	18:50	BlockListDE_Apache_v4
        Jan 9	18:50	BlockListDE_POP3_v4
        Jan 9	18:50	BlockListDE_IMAP_v4
        Jan 9	18:50	BlockListDE_FTP_v4
        Jan 9	18:50	BlockListDE_FTPD_v4
        Jan 9	18:50	BlockListDE_SIP_v4
        Jan 9	18:50	BlockListDE_Bots_v4
        Jan 9	18:50	BlockListDE_Asterisk_v4
        Jan 9	18:50	BlockListDE_Strong_v4
        Jan 9	18:50	BlockListDE_IRC_v4
        Jan 9	18:50	BlockListDE_Brute_v4
        Jan 9	19:10	Abuse_SSLBL_v4
        Jan 9	19:10	Abuse_Feodo_C2_v4
        
        ====================[ DNSBL Last Updated List Summary ]==============
        
        Oct 22	2019	MDS_Immortal
        May 20	2020	Abuse_DOMBL
        May 20	2020	Abuse_URLBL
        May 20	2020	Spam404
        May 20	2020	MoneroMiner
        May 20	2020	NoCoin
        Jul 11	2020	D_Me_Malw
        Jul 11	2020	D_Me_Malv
        Aug 14	00:35	MDS
        Oct 10	05:00	SFS_Toxic_BD
        Nov 6	13:09	CoinBlocker_All
        Nov 6	13:09	CoinBlocker_Opt
        Nov 12	23:17	MDL
        Dec 14	06:01	MS_2
        Dec 15	09:07	MVPS
        Dec 21	05:06	SWC
        Dec 30	06:01	CCT_BD
        Jan 8	03:29	ISC_SDH
        Jan 8	06:00	UT1_phishing
        ===============================================================
        
        Database Sanity check [  PASSED  ]
        ------------------------
        Masterfile/Deny folder uniq check
        Deny folder/Masterfile uniq check
        
        Sync check (Pass=No IPs reported)
        ----------
        
        Alias table IP Counts
        -----------------------------
           82281 total
           36404 /var/db/aliastables/pfB_BlockListDE_v4.txt
           21822 /var/db/aliastables/pfB_PRI1_v4.txt
           19593 /var/db/aliastables/pfB_Europe_v4.txt
            2764 /var/db/aliastables/pfB_PRI5_v4.txt
             926 /var/db/aliastables/pfB_PRI4_v4.txt
             771 /var/db/aliastables/pfB_PRI3_v4.txt
               1 /var/db/aliastables/pfB_Whitelist_v4.txt
        
        pfSense Table Stats
        -------------------
        table-entries hard limit  2000000
        Table Usage Count         83667
        
         UPDATE PROCESS ENDED [ 01/09/21 19:15:28 ]
        
        
        GertjanG 1 Reply Last reply Reply Quote 0
        • GertjanG
          Gertjan @elmnts
          last edited by

          @elmnts said in pfblockerng-dev restarts unbound but DNSBL is disabled:

          CRON PROCESS START [ v3.0.0_8 ] [ 01/09/21 19:15:00 ]

          does not match

          @elmnts said in pfblockerng-dev restarts unbound but DNSBL is disabled:

          Jan 9 06:00:25 unbound 54051:0 info: start of service (unbound 1.10.1).

          The restart of unbound at 06h00 was not triggered by the cron task at 19h15.

          I presume you are using the new python mode, which means the the generic DNSBL file /var/unbound/pfb_dnsbl.conf" doesn't exist any more (present in the Resolver Custom option box).
          Yes, unbound is restart - or reloading.
          Keep in mind that the cache is dumped just before the restart, and loaded back in when started.
          This leans : minimal overhead, as your restart time - and mine, takes just one second - without cache loses.

          This is my reasoning :
          Unbound loads at startup also the python module that does all the DNSBL (and other) work. This python modules uses the probably updated /var/unbound/pfb_py_*.txt files.
          See it like this : if, during an cron update, unbound didn't needed to be restarted, it wouldn't get restarted ;)

          No "help me" PM's please. Use the forum, the community will thank you.
          Edit : and where are the logs ??

          E 1 Reply Last reply Reply Quote 0
          • E
            elmnts @Gertjan
            last edited by

            @gertjan H! Thanks for your reply. I change the execution time of the cron job from 6:00 am to 7:15 pm (see my last post ... I mentioned it in there) so I get a "fresh" log output for my forum post. I am not using the Python Script.

            Unbound ist restarting or reloading but it definitly does not dump the cache and reload it. I checked different cache entries before the cron job was executed and after it was executed.

            unbound-control -c /var/unbound/unbound.conf dump_cache | grep heise
            

            heise.de is an IT website here in Germany and it was in the cache before the cron job was executed but it was not in the cache after it finished. The entry did not expire. I also checked with other entries and they were all gone after the cron job finished.

            GertjanG 1 Reply Last reply Reply Quote 0
            • GertjanG
              Gertjan @elmnts
              last edited by

              @elmnts :

              I tested with the 'unbound' mode.
              Live sync was checked.
              DNSBL is activated :

              Force Update log :

              .....
              TLD finalize... completed [ 01/11/21 10:04:16 ]
              
              Saving DNSBL statistics... completed
               XXXX !pfb['dnsbl_py_blacklist'] is true
               XXXX pfb['dnsbl_sync'] is true
               XXXX !pfbpython is true
               XXXX file_exists /var/unbound/pfb_dnsbl.conf: Yes
              Resolver Live Sync analysis... completed [ 01/11/21 10:04:17 ]
              Resolver Live Sync finalizing:
              	Remove local-zone(s):		no changes
              	Remove local-data(s):		no changes
              	Add local-zone(s):		no changes
              	Add local-data(s):		no changes
              DNSBL update [ 44797 | PASSED  ]... completed
              ------------------------------------------------------------------------
              

              The XXXX lines are added by me, to see if all the conditions are met so a live sync is tried.
              It did, so no restart of unbound was needed.

              You do not use the DNSBL mode, like :

              53733ad8-033e-4b0b-8847-cd4dfad2ab89-image.png

              In that case, all I see when I 'force' a CRON update :

              CRON  PROCESS  START [ v3.0.0_8 ] [ 01/11/21 10:14:29 ]
              
               No Updates required.
              CRON  PROCESS  ENDED
              UPDATE PROCESS ENDED
              

              and unbound isn't restarted at all as pfBlockerNG doesn't work (care about) with host names so there s nothing to do for the resolver unbound - all blocking is IP based..

              What pfBlockerNG version are you using ?

              No "help me" PM's please. Use the forum, the community will thank you.
              Edit : and where are the logs ??

              E 1 Reply Last reply Reply Quote 0
              • E
                elmnts @Gertjan
                last edited by

                @gertjan Hi! I am using pfblockerng-dev 3.0.0_8

                Here is a Screenshot of my setting:

                Bildschirmfoto 2021-01-11 um 10.34.38.jpg

                BBcan177B 1 Reply Last reply Reply Quote 0
                • BBcan177B
                  BBcan177 Moderator @elmnts
                  last edited by

                  @elmnts
                  Thanks for the report, will address in the upcoming release.

                  "Experience is something you don't get until just after you need it."

                  Website: http://pfBlockerNG.com
                  Twitter: @BBcan177  #pfBlockerNG
                  Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                  1 Reply Last reply Reply Quote 2
                  • E
                    elmnts
                    last edited by

                    Thanks everybody who tried to help me with this issue. Thanks to BBcan177 fpr providing a Patch so quickly! You guys are amazing!

                    Cheers!

                    Henry

                    1 Reply Last reply Reply Quote 0
                    • S
                      stepheng
                      last edited by

                      Just a comment that I seem to have had much the same issue as the OP on this thread. I've been using pfblockerng-dev since last autumn upgrading as each new version comes out (I've been on the 2.4.5-p1 version of pfSense). Everything seemed to be working OK until relatively recently when I started having problems with my Roon (audio server) where internet radio streams would stop working at regular intervals. This turned out to correspond to the times when the cron job was running and unbound was being stopped and started. Examination of the Roon logs showed that it was getting a timeout. I tried using the python integration and while this reduced the time that unbound was "off" it didn't solve the problem. I also tried disabling the DNSBL part of pfblockerng but still found that unbound was being restarted on regular intervals.

                      For the moment I have removed pfbockerng-dev completely. Interestingly, I needed to do a save on the DNS configuration settings to reset everything as there was something not quite right as "unbound-control" was no longer working. All is fine now with no unbound restarts, and it may be that some other odd networking artefacts that have appeared recently may be corrected.

                      When I have time to experiment again, I will do a clean re-install of pfBlockerNG-dev, as I would like the added protection provided by it (although I only use a very restricted set of block lists, and at the moment with lockdown and only my partner and myself at home there is less risk of younger family members or visitors going places they shouldn't).

                      E 1 Reply Last reply Reply Quote 0
                      • E
                        elmnts @stepheng
                        last edited by

                        @stepheng Hey! BBcan177 said he would include the patch in the next pfblockerng-dev Update. Maybe wait till version 3.0.0_9 is out. Or ask him if he can provide the patch to you if it is urgent!

                        Cheers!

                        S 1 Reply Last reply Reply Quote 0
                        • S
                          stepheng @elmnts
                          last edited by

                          @elmnts Yes, I'll certainly re-install when the next version appears, or soon after, probably on a day when I'm at home by myself, and I've got a few hours to do some testing without danger of upsetting my partner's television viewing or internet use!

                          As I said, it isn't really urgent because I'm not running an environment where there is a particularly high risk of a user going somewhere they shouldn't or being hijacked, but it is nice to know the protection is there, particularly when life gets back to normal and we have visits from the younger family members who are all over social media!

                          1 Reply Last reply Reply Quote 0
                          • S Summer referenced this topic on
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.