Regression #13117: pfBlockerNG DNSBL unbound python mode prevents deletion of OpenVPN server and client configurations - pfSense - pfSense bugtracker

Actions

Copy link

Regression #13117

closed

pfBlockerNG DNSBL unbound python mode prevents deletion of OpenVPN server and client configurations

Added by Marcos M almost 2 years ago. Updated almost 2 years ago.

Status:

Resolved

Priority:

High

Assignee:

Viktor Gurov

Category:

OpenVPN

Target version:

2.7.0

Start date:

Due date:

% Done:

100%

Estimated time:

Plus Target Version:

22.05

Release Notes:

Force Exclusion

Affected Version:

2.7.0

Affected Architecture:

Description

Issue exists on 22.05.a.20220429.1807.
Issue not present on 22.05.a.20220426.1313.

If DNS Resolver has Enable Python Module with pfb_unbound set, OpenVPN server and client configurations cannot be edited or deleted. Cloning and editing before saving does works, but the new entry cannot be edited/deleted after saving. I tried keeping the python module option enabled while toggling other DNSBL / DNS Resolver options, but it seems only that setting triggers the issue.

Files

netflix-no-aaaa.py (1.37 KB) netflix-no-aaaa.py

Marcos M, 05/03/2022 09:49 AM

Related issues

Actions

Copy link

Updated by Marcos M almost 2 years ago

Category changed from DNS Resolver to Unknown
Priority changed from High to Normal

It seems the issue described initially is a symptom of a race condition with writing the configuration. Still investigating.

Edit: It seems that was a separate issue preventing the edits. Deleting is still an issue:

Steps to reproduce:

Fresh install of 22.05.a.20220429.1807
Setup OpenVPN
- Create default ca
- Create a disabled OpenVPN client config with default settings pointed to bogus server
Setup pfBlockerNG
- Install pfBlockerNG-devel 3.1.0_4
- Go through pfB wizard with all default options
- Enable unbound python mode in pfB DNSBL
- Force a reload on pfB for "All"
Try to delete the OpenVPN client entry
- It does not delete; it comes back after page reload and no changes are written to config.xml
- Delete change is logged to system log and backup revision
- Edit the description; it works
Uncheck Python Module in DNS Resolver
- Deleting the OpenVPN entry now works

Actions

Copy link

Updated by Marcos M almost 2 years ago

Priority changed from Normal to High

Actions

Copy link

Updated by Marcos M almost 2 years ago

Subject changed from pfBlockerNG unbound python module prevents modification of existing OpenVPN server and client configurations to pfBlockerNG DNSBL unbound python mode prevents deletion of OpenVPN server and client configurations

Issue did not occur in either of these scenarios:

Tested with DNSBL python mode enabled, but using a different python script (attached).
Tested with DNSBL python mode disabled, but enabling and setting the pfb_unbound.py script in DNS Resolver.

Actions

Copy link