Cron Job Once/Day

[NollipfSense]

@jrey So, after your last response, I went checking the doc on Netgate and could not find anything specific to cron job yet, then went back to look at the interface without making any changes and now it's say as below despite it should be about 23h and a few minutes...

[jrey]

@NollipfSense said in Cron Job Once/Day:

then went back to look at the interface without making any changes and now it's say as below despite it should be about 23h and a few minutes

and that implies that
a) it is not running now,
b) that it is going to run again at midnight, and that is 14:49:54 away from that time. Is that correct based on your timezone? are your 14:49 away from midnight (00:00)

why are you thinking 23h be the correct display here?

will run at 00:00 with 14:49:54 time remaining

your system clock isn't fluctuating wildly is it ?

[NollipfSense]

@jrey said in Cron Job Once/Day:

again what frequency do you have set on your individual lists ?

[NollipfSense]

@jrey said in Cron Job Once/Day:

why are you thinking 23h be the correct display here?

will run at 00:00 with 14:49:54 time remaining

Okay, I messed up on the 23hr...thinking it's from the time I rebooted; so, now the crob job is showing the correct time to the next run, since it's 9:40am approximately. Thank you for pointing that out.

[jrey]

@NollipfSense

So looks like the problem is resolved and "time" will tell at this point.

Let us know tomorrow if the run is successful overnight and the time remaining until next run when you view in the morning appears correct.

(did you happen save or re-save any of the configuration screens along the way?)

[NollipfSense]

@jrey said in Cron Job Once/Day:

@NollipfSense

So looks like the problem is resolved and "time" will tell at this point.

Let us know tomorrow if the run is successful overnight and the time remaining until next run when you view in the morning appears correct.

(did you happen save or re-save any of the configuration screens along the way?)

No change other than reboot and yes will follow up as you're correct that only time will tell.

[NollipfSense]

Well, this morning Cron job was stuck again and it seems that it occurs when list constantly fail to download , such as [ DNSBL_Malicious - MDL ] Download Fail [ 09/3/23 00:00:32 ]. It had failed every day and was removed this morning. Also removed/disabled was the shellalist...I had advertising and tracking only and those failed.
[ DNSBL_Shallalist - Shallalist_adv ] Download Fail [ 10/31/23 00:00:33 ]
[ DNSBL_Shallalist - Shallalist_tracker ] Download Fail [ 10/31/23 00:00:33 ]

The same was enabled in the UT-list. I'll continue to monitor

[jrey]

@NollipfSense

I'm not really surprised by that.

Good luck.

[NollipfSense]

@jrey said in Cron Job Once/Day:

I'm not really surprised by that.

That's because the bug is still present...see here: https://forum.netgate.com/topic/178357/active-pfblockerng-cron-job-never-ends/4

[NollipfSense]

@BBcan177 It appears that the cron job bug or a bug that causes cron job to constantly run which was supposedly fixed in v3.2.0_3 is still present in v3.2.0_6. Yes, I have wildcard blocking TLD enabled; however, that's one of the main features to run pfBlockerNG. Is there another work around other than disabling that feature? My feeds and cron job are set to update/run once per day.

[jrey]

Not really where I was going with my comment, but ok

@NollipfSense said in Cron Job Once/Day:

That's because the bug is still present.

You must realize, of course, this is new information to your problem description, as it is the first time you have mentioned that

@NollipfSense said in Cron Job Once/Day:

I have wildcard blocking TLD enabled

Good to know.

are you seeing the TLD processing mentioned in the log file ?

"Assembling DNSBL database...... completed [ 05/22/23 22:47:03 ]
TLD:
TLD analysis..xx completed [ 05/22/23 22:47:21 ]

are you
Unbound mode or;
Unbound python mode
?

Edit: on the dashboard widget does it show the DNSBL_* -- what is the value in the Count column ?

[NollipfSense]

@jrey said in Cron Job Once/Day:

this is new information to your problem description,

That's because I discovered it doing a search of the problem I am facing...the same exact issue, cron job constantly running...

@jrey said in Cron Job Once/Day:

are you seeing the TLD processing

It's working remember I had added snapshots.netgate.com and was able to download v2.8dev.

@jrey said in Cron Job Once/Day:

Unbound python mode

yes

@jrey said in Cron Job Once/Day:

on the dashboard widget does it show the DNSBL

pfBlockerNG is functioning normally except for the cron job...just notice the yellow dot with ! when it should be green...

[jrey]

@NollipfSense said in Cron Job Once/Day:

are you seeing the TLD processing

sorry, I meant can you show the log file output (part) that shows TLD being processed. I don't see an image of that.

is there an error in the error.log ?

[NollipfSense]

@jrey said in Cron Job Once/Day:

@NollipfSense said in Cron Job Once/Day:

are you seeing the TLD processing

sorry, I meant can you show the log file output (part) that shows TLD being processed. I don't see an image of that.

is there an error in the error.log ?

That's why I had said that pfBlockerNG is functioning normally except for the cron job...I feel we are moving away from the cron job issue that's continuously running...Here is a small capture of DNSBL log and error log...note there is an error earlier when I rebooted then update...but I could not reload because cron job had already started it continuous run. Not sure what couldn't open ports...

DNSBL-python,Nov 2 13:11:30,incoming-telemetry.thunderbird.net,192.168.1.100,Python,DNSBL_A,DNSBL_ADs,incoming-telemetry.thunderbird.net,Yoyo,+
DNSBL-python,Nov 2 13:15:00,incoming-telemetry.thunderbird.net,192.168.1.100,Python,DNSBL_A,DNSBL_ADs,incoming-telemetry.thunderbird.net,Yoyo,-
DNSBL-python,Nov 2 13:16:30,incoming-telemetry.thunderbird.net,192.168.1.100,Python,DNSBL_A,DNSBL_ADs,incoming-telemetry.thunderbird.net,Yoyo,-
DNSBL-python,Nov 2 13:20:30,incoming-telemetry.thunderbird.net,192.168.1.100,Python,DNSBL_A,DNSBL_ADs,incoming-telemetry.thunderbird.net,Yoyo,-
DNSBL-python,Nov 2 13:22:00,incoming-telemetry.thunderbird.net,192.168.1.100,Python,DNSBL_A,DNSBL_ADs,incoming-telemetry.thunderbird.net,Yoyo,-
DNSBL-python,Nov 2 15:43:58,metrics.icloud.com,192.168.1.100,HSTS,DNSBL_HTTPS,DNSBL_EasyList,metrics.icloud.com,EasyPrivacy,+
DNSBL-python,Nov 2 16:57:36,metrics.icloud.com,192.168.1.100,HSTS,DNSBL_HTTPS,DNSBL_EasyList,metrics.icloud.com,EasyPrivacy,-
DNSBL-python,Nov 2 18:11:19,metrics.icloud.com,192.168.1.100,HSTS,DNSBL_HTTPS,DNSBL_EasyList,metrics.icloud.com,EasyPrivacy,-

[ DNSBL_Shallalist - Shallalist_adv ] Download Fail [ 10/31/23 00:00:33 ]
Local File Failure [ 10/31/23 00:00:33 ]
[ DNSBL_Shallalist - Shallalist_tracker ] Download Fail [ 10/31/23 00:00:33 ]
Local File Failure [ 10/31/23 00:00:33 ]
DNSBL disabled - Unbound conf update FAIL *** Fix error(s) and a Force Reload required! *** [ 11/2/23 14:06:19 ]

[1698951979] unbound[73183:0] error: bind: address already in use [1698951979] unbound[73183:0] fatal error: could not open ports

[ 11/2/23 14:06:19 ]
DNSBL enabled FAIL *** Fix error(s) and a Force Reload required! *** [ 11/2/23 14:07:55 ]

[1698952075] unbound[80987:0] error: bind: address already in use [1698952075] unbound[80987:0] fatal error: could not open ports

[ 11/2/23 14:07:55 ]

[NollipfSense]

Found this thread and will read in the morning: https://forum.netgate.com/topic/176362/pfblockerng-devel-v3-1-0_7-update-unbound-issue

[jrey]

@NollipfSense

Interesting post just a few minutes ago. ( I'll ask obvious the question there )

https://forum.netgate.com/topic/183821/shallalist-failed-to-open-stream-no-such-file-or-directory

[NollipfSense]

@jrey said in Cron Job Once/Day:

@NollipfSense

Interesting post just a few minutes ago. ( I'll ask obvious the question there )

https://forum.netgate.com/topic/183821/shallalist-failed-to-open-stream-no-such-file-or-directory

Yes, I just responded...in my case, it seems that an issue with Unbound python mode...right now, cron job has been running since the last update at midnight...no sure what to do, maybe enable every hour despite running for nothing. Hope BBcan177 will respond for clarification...

[jrey]

@NollipfSense said in Shallalist: Failed to open stream: No such file or directory:

That's why I removed it, but the hanging continues...

but from what you have provided on this post
and looking at the code, it's not cron that is the issue.

Cron is only reacting to not seeing the requested job finish as expected, so it appears to be waiting (and it likely is).

you might simply have a bad file in one of the directories

when cron runs the job it tries to do "normal" things with it.
it fails (or does it really) but the result is garbage in the file that is going to be used by unbound, as it in part or perhaps even all of it gets parsed into the unbound list.
then pfB code gets into a loop trying to start/stop unbound (and it can't) but it keeps trying or never gets an expected response.

Don't really have all the details about what your various settings were and / or are now, just suggesting, you might need to clean up left over "stuff" manually to get it going again.

I can't say for certain with shallalist, and obviously can't even test anymore, but can with 100% certainty, demonstrate similar bad things with an ASN feed goes bad

If I had to venture a further guess, I'd suspect you are getting an "unbound" issue cause cron to say "i'm running"

are you seeing unbound start and stop rapidly ?
more than one copy running?

what kind of messaging are you seeing in the DNS Resolver log for unbound.

so again just suggesting, you might need to clean up left over "stuff" manually to get it going again.

[NollipfSense]

@jrey said in Cron Job Once/Day:

Cron is only reacting to not seeing the requested job finish as expected,

I had rebooted after that and it has not presented anything else.

@jrey said in Cron Job Once/Day:

what kind of messaging are you seeing in the DNS Resolver log for unbound.

Nothing unusual...

Nov 2 19:10:57 unbound 99157 [99157:0] notice: init module 0: python
Nov 2 19:10:57 unbound 99157 [99157:0] info: [pfBlockerNG]: pfb_unbound.py script loaded
Nov 2 19:10:57 unbound 99157 [99157:0] info: [pfBlockerNG]: init_standard script loaded
Nov 2 19:10:57 unbound 99157 [99157:0] notice: init module 1: validator
Nov 2 19:10:57 unbound 99157 [99157:0] notice: init module 2: iterator
Nov 2 19:10:57 unbound 99157 [99157:0] info: start of service (unbound 1.17.1).
Nov 2 19:14:21 unbound 91640 [91640:0] notice: init module 0: python
Nov 2 19:14:21 unbound 91640 [91640:0] info: [pfBlockerNG]: pfb_unbound.py script loaded
Nov 2 19:14:22 unbound 91640 [91640:0] info: [pfBlockerNG]: init_standard script loaded
Nov 2 19:14:22 unbound 91640 [91640:0] notice: init module 1: validator
Nov 2 19:14:22 unbound 91640 [91640:0] notice: init module 2: iterator
Nov 2 19:14:22 unbound 91640 [91640:0] info: start of service (unbound 1.17.1).
Nov 2 19:14:30 unbound 91640 [91640:6] info: generate keytag query _ta-4f66. NULL IN
Nov 3 00:00:58 unbound 93173 [93173:0] notice: init module 0: python
Nov 3 00:00:58 unbound 93173 [93173:0] info: [pfBlockerNG]: pfb_unbound.py script loaded
Nov 3 00:00:58 unbound 93173 [93173:0] info: [pfBlockerNG]: init_standard script loaded
Nov 3 00:00:58 unbound 93173 [93173:0] notice: init module 1: validator
Nov 3 00:00:58 unbound 93173 [93173:0] notice: init module 2: iterator
Nov 3 00:00:58 unbound 93173 [93173:0] info: start of service (unbound 1.17.1).
Nov 3 00:01:04 unbound 93173 [93173:2] info: generate keytag query _ta-4f66. NULL IN

[NollipfSense]

Looks like v23.09RC may have fixed the issue and DNSBL now has the green check mark...will continue to monitor...