Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Last config change

    Scheduled Pinned Locked Moved General pfSense Questions
    2 Posts 1 Posters 1.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • V
      vatson
      last edited by

      I just noticed that on two of my pfSense boxes (2.1-RELEASE), 'Last config change' shows a time when I did not make any config changes. Nobody else should have access to these systems and according to system logs, nobody was logged in to the web interface or command line at that time.
      The only line in system logs which coincides with the last config change timestamp is

      check_reload_status: Syncing firewall

      which seems to be logged not only at these times, but quite frequently.

      Is this an indicator of compromised system, or is there a normal explanation to this?

      1 Reply Last reply Reply Quote 0
      • V
        vatson
        last edited by

        OK, possible explanation found. I am running the bind package with some slave zones, and the timestamp of newest zone database file coincides with the 'Last config change' timestamp.

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.