OPNsense Forum

Archive => 23.1 Legacy Series => Topic started by: opn_minded on February 24, 2023, 10:06:43 AM

Title: unbound - empty reporting
Post by: opn_minded on February 24, 2023, 10:06:43 AM
hi!

i'm on OPNsense 23.1.1_2.

when i have a look under reporting > unbound dns, the "main stats" "total"/"resolved"/"block" remain the same for days, only the "size of blocklist" varies.

i'm using hosts.oisd.nl (hope that's the right format for opn-unbound) as single custom blocklist.

for example, there's an entry in the blocklist: 0.0.0.0 trace.svc.ui.com (the unifi call-home) and i can see periodical entries like "[43393:2] info: 127.0.0.1 trace.svc.ui.com. AAAA IN" in unbounds' log.

is there something i can do (even though i hope it's just a visual effect, not a functional)?
Title: Re: unbound - empty reporting
Post by: opn_minded on February 26, 2023, 08:50:19 AM
i tried now with several blocklist-formats:
- https://big.oisd.nl/unbound: lines: 278030 exclude: 278021 block: 0, doesn't seem to be recognized???
- https://big.oisd.nl: lines: 278029 exclude: 278028 block: 0, same as above???
- https://hosts.oisd.nl: lines: 856384 exclude: 0 block: 856376, works

q1) does anyone know why a dedicated unbound-formatted blocklist would have "block: 0" after download?
q2) after testing several blocklists above, suddenly the reporting started to work again. does anyone have the same behavior?
Title: Re: unbound - empty reporting
Post by: marunjar on February 26, 2023, 09:39:26 AM
Some of the files you linked are using syntax which OPNSense doesn't support.
e.g. https://big.oisd.nl/ uses syntax for AdBlock Plus (||domain^) i think

For OPNSense you would prefer a simple list of domains (https://big.oisd.nl/domains) as also needed for e.g. Pi-hole
or hosts file which is slightliy bigger but will also work.

For empty reporting i have no answer.