Pfblocker Logs Appearing in DNS Resolver Log

scottjh1

When reviewing logs I found Pfblocker logs in the DNS Resolver log. How do I correct this issue? Currently running Pfsense version 2.8.1, and PfBlockerNG-devel 3.2.10.

Last 3 DNS Resolver Log Entries. (Maximum 120)
Dec 19 12:34:11 unbound 79808 [79808:0] info: start of service (unbound 1.23.0).
Dec 19 12:34:11 unbound 79808 [79808:0] info: [pfBlockerNG]: init_standard script loaded
Dec 19 12:34:10 unbound 79808 [79808:0] info: [pfBlockerNG]: pfb_unbound.py script loaded

Thanks,
Jim

tinfoilmatt

@scottjh1 This is not an issue. Unbound is simply logging confirmation that the pfBlockerNG Python integration is being loaded as it starts (which is presumably your intended configuration).

scottjh1

Thank you for responding and providing the reason why. Yes, this is my intended configuration.

tinfoilmatt

@scottjh1 You're welcome. As an aside you should perform a pkg upgrade unbound via shell as Unbound is currently patched to version 1.24.2.

scottjh1

Thank you, I'll go to work on upgrading unbound.

scottjh1

I have unbound 1.24.2.tar, however I do not know how to correctly install the file. Can you please help with the install?
Thank you

stephenw10

Just run pkg upgrade unbound at the command line and it will upgrade the install.

scottjh1

Thank you for your help. Just ran the command "pkg upgrade unbound" at the command prompt. At the bottom of the window "Proceed with this action? [y/N]:" is displayed and it will not allow any response. At the bottom a entry point for PHP commands exists and I entered print("yes");. Next step?

Text from the command prompt:
Updating pfSense-core repository catalogue...
Fetching meta.conf:
Fetching data.pkg:
pfSense-core repository is up to date.
Updating pfSense repository catalogue...
Fetching meta.conf:
Fetching data.pkg:
pfSense repository is up to date.
All repositories are up to date.
The following 1 package(s) will be affected (of 0 checked):

Installed packages to be UPGRADED:
unbound: 1.23.0 -> 1.24.2 [pfSense]

Number of packages to be upgraded: 1

3 MiB to be downloaded.

Proceed with this action? [y/N]:

dennypage

@scottjh1 said in Pfblocker Logs Appearing in DNS Resolver Log:

Just ran the command "pkg upgrade unbound" at the command prompt.

"... at the command line" means using an interactive shell window. Use ssh to log into pfSense and try the command again.

scottjh1

@dennypage Thank you and Stephenw for your help! Clearly I missed what Stephenw was telling me, apparently I was daft at the time. Using the command prompt via diagnostics in place of ssh clearly did not work. Initially I was not initially able to complete update receiving a message indicating insufficent rights. Did some digging and found a thread (Netgate Forum) that provided a fix. Running the following command from the console "pkg-static upgrade -fy pfSense-repoc" corrected the issue. At that point I was able to successfully run "pkg upgrade unbound". completing the upgrade.

stephenw10

Yup, sorry I should have made that clear.

Just for reference if you need to use the gui command prompt for that for any reason you can use the -y switch to answer yes to that automatically like:
pkg upgrade -y unbound

But it's always better to use the real command line if you can.

scottjh1

Thank you Stephen10. No worries, it was a good learning adventure and now have tools for next time.