pfSense » pfSense Packages

Infamous ( #12869 , #10413 ) filter-aaaa.so plugin issue is back in a new twist, this time the error says it cannot load plugin because of API version mismatch.
This is on freshly upgraded pfSense plus to 25.07.

named logs from /vavr/log/resolver.log file
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: starting BIND 9.20.6 (Stable Release) <id:>
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: running on FreeBSD amd64 15.0-CURRENT FreeBSD 15.0-CURRENT #0 plus-RELENG_25_07-n256508-719054fb1f90: Mon Jul 28 16:47:59 UTC 2025 root@freebsd:/var/jenkins/workspace/pfSense-Plus-snapshots-25_07-main/obj/amd64/KX1V1LAU/var/jenkins/workspace/pfSense-Plus-snapshots-25_07-main/sources/FreeB
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: built with '--localstatedir=/var' '--sysconfdir=/usr/local/etc/namedb' '--with-libxml2' '--with-openssl=/usr' '--enable-dnsrps' '--with-readline=libedit' '--disable-tracing' '--enable-dnstap' '--disable-fixed-rrset' '--disable-geoip' '--without-maxminddb' '--without-gssapi' '--without-libidn2' '--with-json-c' '--disable-largefile' '--without-lmdb' '--disable-querytrace' '--enable-tcp-fastopen' '--prefix=/usr/local' '--mandir=/usr/local/share/man' '--disable-silent-rules' '--infodir=/usr/local/share/info/' '--build=amd64-portbld-freebsd15.0' 'build_alias=amd64-portbld-freebsd15.0' 'CC=cc' 'CFLAGS=-O2 pipe -fstack-protector-strong -isystem /usr/local/include -fno-strict-aliasing ' 'LDFLAGS= -L/usr/local/lib -ljson-c -fstack-protector-strong ' 'LIBS=-L/usr/local/lib' 'CPPFLAGS=-isystem /usr/local/include' 'CPP=cpp' 'PKG_CONFIG=pkgconf' 'PKG_CONFIG_LIBDIR=/wrkdirs/usr/ports/dns/bind920/work/.pkgconfig:/usr/local/libdata/pkgconfig:/usr/local/share/pkgconfig:/usr/libdata/pkgconfig'
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: running as: named -4 -c /etc/namedb/named.conf -u bind -t /var/etc/named/
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: compiled by CLANG FreeBSD Clang 19.1.5 (https://github.com/llvm/llvm-project.git llvmorg-19.1.5-0-gab4b5a2db582)
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: compiled with OpenSSL version: OpenSSL 3.0.16 11 Feb 2025
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: linked to OpenSSL version: OpenSSL 3.0.16 11 Feb 2025
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: compiled with libuv version: 1.49.2
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: linked to libuv version: 1.49.2
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: compiled with liburcu version: 0.14.0
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: compiled with system jemalloc version: 2024073001
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: compiled with libnghttp2 version: 1.64.0
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: linked to libnghttp2 version: 1.64.0
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: compiled with libxml2 version: 2.11.9
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: linked to libxml2 version: 21109
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: compiled with json-c version: 0.18
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: linked to json-c version: 0.18
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: compiled with zlib version: 1.3.1
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: linked to zlib version: 1.3.1
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: compiled with protobuf-c version: 1.4.1
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: linked to protobuf-c version: 1.4.1
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: ---------------------------------------------------
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: BIND 9 is maintained by Internet Systems Consortium,
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: Inc. (ISC), a non-profit 501(c)(3) public-benefit
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: corporation. Support and training for BIND 9 are
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: available at https://www.isc.org/support
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: ----------------------------------------------------
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: the limit on open files is already at the maximum allowed value: 113904
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: found 4 CPUs, using 4 worker threads
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: DNSSEC algorithms: RSASHA1 NSEC3RSASHA1 RSASHA256 RSASHA512 ECDSAP256SHA256 ECDSAP384SHA384 ED25519 ED448
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: DS algorithms: SHA-1 SHA-256 SHA-384
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: HMAC algorithms: HMAC-MD5 HMAC-SHA1 HMAC-SHA224 HMAC-SHA256 HMAC-SHA384 HMAC-SHA512
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: TKEY mode 2 support (Diffie-Hellman): no
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: TKEY mode 3 support (GSS-API): no
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: the initial working directory is '/'
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: loading configuration from '/etc/namedb/named.conf'
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: the working directory is now '/etc/namedb'
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: using default UDP/IPv4 port range: [49152, 65535]
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: listening on IPv4 interface lo0, 127.0.0.1#10053
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: listening on IPv4 interface igb1.26, 10.10.1.1#10053
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: generating session key for dynamic DNS
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: using built-in root key for view all
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: set up managed keys zone for view all, file 'all.mkeys'
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: loading plugin '/usr/local/lib/named/filter-aaaa.so'
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: plugin API version mismatch: 1/2
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: failed to dynamically load plugin '/usr/local/lib/named/filter-aaaa.so': failure
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: /usr/local/lib/named/filter-aaaa.so: plugin configuration failed: failure
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: loading configuration: failure
Aug 5 18:27:00 gw named⁷⁴⁹⁹³: exiting (due to fatal error)