Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    pfBlockerNG-devel v3.1.0_19/10

    Scheduled Pinned Locked Moved pfBlockerNG
    77 Posts 17 Posters 18.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      bigjohns97 @cmcdonald
      last edited by cmcdonald

      @cmcdonald said in pfBlockerNG-devel v3.1.0_19/10:

      @bigjohns97

      Report the output of

      pkg info unbound

      unbound-1.17.0
      Name : unbound
      Version : 1.17.0
      Installed on : Sat Jan 14 12:37:18 2023 CST
      Origin : dns/unbound
      Architecture : FreeBSD:14:amd64
      Prefix : /usr/local
      Categories : dns
      Licenses : BSD3CLAUSE
      Maintainer : jaap@NLnetLabs.nl
      WWW : https://www.nlnetlabs.nl/projects/unbound
      Comment : Validating, recursive, and caching DNS resolver
      Options :
      DEP-RSA1024 : off
      DNSCRYPT : on
      DNSTAP : off
      DOCS : off
      DOH : on
      ECDSA : on
      EVAPI : off
      FILTER_AAAA : off
      GOST : on
      HIREDIS : off
      LIBEVENT : on
      MUNIN_PLUGIN : off
      PYTHON : on
      SUBNET : off
      TFOCL : off
      TFOSE : off
      THREADS : on
      Shared Libs required:
      libsodium.so.23
      libpython3.9.so.1.0
      libnghttp2.so.14
      libexpat.so.1
      libevent-2.1.so.7
      Shared Libs provided:
      libunbound.so.8
      Annotations :
      FreeBSD_version: 1400073
      build_timestamp: 2022-10-27T06:51:33+0000
      built_by : poudriere-git-3.3.99.20220831
      cpe : cpe:2.3:a:nlnetlabs:unbound:1.17.0:::::freebsd14:x64
      port_checkout_unclean: no
      port_git_hash : 7b7b452fb8d5
      ports_top_checkout_unclean: yes
      ports_top_git_hash: 0c964f08a5cb
      repo_type : binary
      repository : pfSense
      Flat size : 8.36MiB
      Description :
      Unbound is designed as a set of modular components, so that also
      DNSSEC (secure DNS) validation and stub-resolvers (that do not run as
      a server, but are linked into an application) are easily possible.

      Goals:
      * A validating recursive DNS resolver.
      * Code diversity in the DNS resolver monoculture.
      * Drop-in replacement for BIND apart from config.
      * DNSSEC support.
      * Fully RFC compliant.
      * High performance, even with validation enabled.
      * Used as: stub resolver, full caching name server, resolver library.
      * Elegant design of validator, resolver, cache modules.
      o provide the ability to pick and choose modules.
      * Robust.
      * In C, open source: The BSD license.
      * Smallest as possible component that does the job.
      * Stub-zones can be configured (local data or AS112 zones).

      Non-goals:
      * An authoritative name server.
      * Too many Features.

      WWW: https://www.nlnetlabs.nl/projects/unbound

      ldd `which unbound`

      /usr/local/sbin/unbound:
      libssl.so.111 => /usr/lib/libssl.so.111 (0x822469000)
      libsodium.so.23 => /usr/local/lib/libsodium.so.23 (0x8236ec000)
      libutil.so.9 => /lib/libutil.so.9 (0x822a37000)
      libevent-2.1.so.7 => /usr/local/lib/libevent-2.1.so.7 (0x823fcb000)
      libpython3.9.so.1.0 => /usr/local/lib/libpython3.9.so.1.0 (0x824b25000)
      libcrypto.so.111 => /lib/libcrypto.so.111 (0x8259f7000)
      libnghttp2.so.14 => /usr/local/lib/libnghttp2.so.14 (0x82790a000)
      libthr.so.3 => /lib/libthr.so.3 (0x825eff000)
      libc.so.7 => /lib/libc.so.7 (0x826edd000)
      libcrypt.so.5 => /lib/libcrypt.so.5 (0x8284bd000)
      libintl.so.8 => /usr/local/lib/libintl.so.8 (0x829b94000)
      libdl.so.1 => /usr/lib/libdl.so.1 (0x828694000)
      libm.so.5 => /lib/libm.so.5 (0x828758000)
      [vdso] (0x8215a5000)

      pkg info "py*"

      py311-maxminddb-2.2.0_2
      py311-setuptools-63.1.0
      py311-sqlite3-3.11.1_8
      py39-libzfs-1.1.2022081600
      py39-setuptools-63.1.0
      py39-yaml-5.4.1
      python311-3.11.1_1
      python39-3.9.15

      cmcdonaldC 1 Reply Last reply Reply Quote 0
      • cmcdonaldC
        cmcdonald Netgate Developer @bigjohns97
        last edited by

        @bigjohns97 and this is on 23.01?

        Need help fast? https://www.netgate.com/support

        B 1 Reply Last reply Reply Quote 0
        • B
          bigjohns97 @cmcdonald
          last edited by

          @cmcdonald Correct, dashboard shows 23.01 RC

          Current Base System23.01.r.20230202.1645
          Latest Base System23.01.r.20230202.1645
          StatusUp to date.

          cmcdonaldC 1 Reply Last reply Reply Quote 0
          • cmcdonaldC
            cmcdonald Netgate Developer @bigjohns97
            last edited by cmcdonald

            @bigjohns97 That is very odd.

            The problem is you are running older Unbound which is using Python 3.9 and not 3.11

            unbound-1.17.1_2
            py311-libzfs-1.1.2022081600
            py311-maxminddb-2.2.0_2
            py311-setuptools-63.1.0
            py311-sqlite3-3.11.1_8
            py39-libzfs-1.1.2022081600
            py39-maxminddb-2.2.0_1
            py39-setuptools-63.1.0
            python311-3.11.1_1
            python39-3.9.16
            

            These are the versions that we ship with 23.01-RC

            I would try reinstalling unbound:

            pkg install -fy unbound

            Need help fast? https://www.netgate.com/support

            B 1 Reply Last reply Reply Quote 0
            • B
              bigjohns97 @cmcdonald
              last edited by bigjohns97

              @cmcdonald That's odd, I also seem to be missing that 311 libzfs which I am using zfs and boot environments.

              How would I go about getting these correct packages?

              Edit: that worked, I now show the following.

              py311-maxminddb-2.2.0_2
              py311-setuptools-63.1.0
              py311-sqlite3-3.11.1_8
              py39-libzfs-1.1.2022081600
              py39-setuptools-63.1.0
              py39-yaml-5.4.1
              python311-3.11.1_1
              python39-3.9.15
              unbound-1.17.1_2

              cmcdonaldC 1 Reply Last reply Reply Quote 0
              • cmcdonaldC
                cmcdonald Netgate Developer @bigjohns97
                last edited by

                @bigjohns97 what if you just do pkg upgrade what does it offer to upgrade?

                Need help fast? https://www.netgate.com/support

                B 1 Reply Last reply Reply Quote 0
                • B
                  bigjohns97 @cmcdonald
                  last edited by

                  @cmcdonald

                  Updating pfSense-core repository catalogue...
                  pfSense-core repository is up to date.
                  Updating pfSense repository catalogue...
                  pfSense repository is up to date.
                  All repositories are up to date.
                  Checking for upgrades (4 candidates): 100%
                  Processing candidates (4 candidates): 100%
                  The following 5 package(s) will be affected (of 0 checked):

                  New packages to be INSTALLED:
                  whois: 5.5.7 [pfSense]

                  Installed packages to be UPGRADED:
                  pfSense: 23.01.b.20230106.0600 -> 23.01.r.20230202.1645 [pfSense]
                  pfSense-Status_Monitoring: 1.7.11_4 -> 1.8 [pfSense]
                  pfSense-repo: 23.01.b.20230106.0600 -> 23.01.r.20230202.1645 [pfSense]
                  python39: 3.9.15 -> 3.9.16 [pfSense]

                  Number of packages to be installed: 1
                  Number of packages to be upgraded: 4

                  71 KiB to be downloaded.

                  Proceed with this action? [y/N]:

                  cmcdonaldC 1 Reply Last reply Reply Quote 0
                  • cmcdonaldC
                    cmcdonald Netgate Developer @bigjohns97
                    last edited by

                    @bigjohns97

                    What repo is set on the update GUI page?

                    Need help fast? https://www.netgate.com/support

                    B 1 Reply Last reply Reply Quote 0
                    • B
                      bigjohns97 @cmcdonald
                      last edited by

                      @cmcdonald

                      6dda5b3e-c5ee-41d9-817c-6050de1b94e4-image.png

                      cmcdonaldC 1 Reply Last reply Reply Quote 0
                      • cmcdonaldC
                        cmcdonald Netgate Developer @bigjohns97
                        last edited by

                        @bigjohns97

                        Very strange....

                        I'm not sure how you've got in the state that you have, but I would first the pkg upgrade above, let that install, and then go back and try pkg upgrade again and see what it offers. It almost seems like you're still pointing at an old repository (you're version of pfSense-repo is 23.01.b)

                        strange.

                        Get the pfSense-repo package updated, and let's try again.

                        Need help fast? https://www.netgate.com/support

                        Bob.DigB B 2 Replies Last reply Reply Quote 1
                        • Bob.DigB
                          Bob.Dig LAYER 8 @cmcdonald
                          last edited by

                          @cmcdonald Sry to interrupt, I have no hit with pkg info py*
                          Is this normal?

                          
                          [23.01-RC][admin@pfSense.home.arpa]/root: pkg info py*
                          pkg: No match.
                          
                          
                          
                          B 1 Reply Last reply Reply Quote 0
                          • B
                            bigjohns97 @Bob.Dig
                            last edited by

                            @bob-dig Put the py* in quotes

                            Bob.DigB cmcdonaldC 2 Replies Last reply Reply Quote 2
                            • Bob.DigB
                              Bob.Dig LAYER 8 @bigjohns97
                              last edited by Bob.Dig

                              @bigjohns97 said in pfBlockerNG-devel v3.1.0_19/10:

                              Thx, I am good.

                              [23.01-RC][admin@pfSense.home.arpa]/root: pkg info "py*"
                              py311-maxminddb-2.2.0_2
                              py311-setuptools-63.1.0
                              py311-sqlite3-3.11.1_8
                              py39-libzfs-1.1.2022081600
                              py39-setuptools-63.1.0
                              python311-3.11.1_1
                              python39-3.9.16
                              
                              
                              1 Reply Last reply Reply Quote 0
                              • cmcdonaldC
                                cmcdonald Netgate Developer @bigjohns97
                                last edited by

                                sorry yes, otherwise it will do shell expansion on the current working directory, which is wrong lol we want the asterisk literal to be passed to pkg(8).

                                Need help fast? https://www.netgate.com/support

                                1 Reply Last reply Reply Quote 1
                                • B
                                  bigjohns97 @cmcdonald
                                  last edited by

                                  @cmcdonald Ok, it took the upgrades and now the system info widget no longer suggests there is a upgrade and when I run pkg upgrade 👍

                                  Also after deleting the py_error.log and doing an update everything is back to working order on that pfblockerng side as well.

                                  There must have been some issues with the upgrade between the 23.01 beta and the 23.01 RC. (Normally I only try RC's but was really ready to get on this 23.01 due to the upgrade to FreeBSD and the use of Speedshift vs Speedstep).

                                  Everything is working perfectly again, thank you for all of your help.

                                  Excellent work on the WG implementation BTW! 👏

                                  1 Reply Last reply Reply Quote 0
                                  • B bigjohns97 referenced this topic on
                                  • S SteveITS referenced this topic on
                                  • S SteveITS referenced this topic on
                                  • S SteveITS referenced this topic on
                                  • S SteveITS referenced this topic on
                                  • BBcan177B BBcan177 unpinned this topic on
                                  • D
                                    Draco @Draco
                                    last edited by

                                    @BBcan177 Just wanted to confirm that I inserted the (most recent) link to the JSON file and it is parsing just fine. Much easier than manual downloads, thanks!

                                    1 Reply Last reply Reply Quote 0
                                    • First post
                                      Last post
                                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.