Looking at Security -> Q-Feeds Connect -> Feeds, did the update interval change from 24-hours to 48-hours after the connector was updated to version 1.5_3?
The Q-Feeds Connector update was installed at the same time as OPNsense 26.1.7_3.
We've been able to reproduce unfortunately.
Solution might be rebooting (not sure)
True solution is to empty the folder "/var/db/qfeeds-tables/"
by running these commands:
cd /var/db/qfeeds-tables/
rm *
Bug reported to the developers as well: https://github.com/opnsense/plugins/issues/5428
Actually I realized this is affecting everyone.
For example I have a PLUS sub, and my refresh interval instead of 4h is set to 8h.
(https://forum.opnsense.org/index.php?action=dlattach;attach=54863;image)
After removing the the content of /var/db/qfeeds-tables/ and re-triggering the feeds download its back to 4h.
(https://forum.opnsense.org/index.php?action=dlattach;attach=54865;image)
Looks like per the OP example and my, the poll rate interval doubles for some reason :D, kinda funny.
Regards,
S.
I am a weird one. rather against installing a lot of plugins.
when I subscribed I opened a ticket and got instructions for manually adding an alias(url table IP) and how to add it as a blocklist to unbound.
--I may have gotten the idea from one of Patricks screen shots of his adguard configuration --
I am not having that issue
This more like plugin specific issue.
The Plugin, controls the poll rate per the sub you have. With manually defining the alias or the blocklist the poll interval is shifted outside the Plugin.
Regards,
S.
QuoteTrue solution is to empty the folder "/var/db/qfeeds-tables/"
by running these commands:
I've made no changes on my end and left it to check at the time listed in the earlier screen-shot.
It is now back to daily updates and the time appears to be around the time I activated the installation - may be just a coincidence.
The main reason to leave Q-Feeds to update just after midnight is to see if the Events would be cleared, which they aren't. It appears there is a hard limit of 50,000 entries and once this is reached, no more entries are recorded.
Do these Events need to be deleted manually?
Quote from: DEC740airp414user on May 08, 2026, 12:50:54 PMI am a weird one. rather against installing a lot of plugins.
when I subscribed I opened a ticket and got instructions for manually adding an alias(url table IP) and how to add it as a blocklist to unbound.
--I may have gotten the idea from one of Patricks screen shots of his adguard configuration --
I am not having that issue
Hmm, I would expect blocking a table of IP's would be best performed in PF. I'm not sure how this would benefit Unbound.
Quote from: lmoore on May 08, 2026, 06:44:31 PMQuote from: DEC740airp414user on May 08, 2026, 12:50:54 PMI am a weird one. rather against installing a lot of plugins.
when I subscribed I opened a ticket and got instructions for manually adding an alias(url table IP) and how to add it as a blocklist to unbound.
--I may have gotten the idea from one of Patricks screen shots of his adguard configuration --
I am not having that issue
Hmm, I would expect blocking a table of IP's would be best performed in PF. I'm not sure how this would benefit Unbound.
I'm not sure what you mean by pf
It's a 75kb app. I don't think it's that complicated.the only thing I am missing is the widget on the Home Screen
Same here. I'm using the community version, and I noticed it only updates every 48 hours. After cleaning the aforementioned directory, the interval dropped to 24 hours. I also noticed that the newly downloaded malware_domains file is nearly twice as large.
# ls -la
drwxr-x--- 2 root wheel 5 Apr 7 19:27 .
drwxr-xr-x 24 root wheel 31 May 5 16:22 ..
-rw-r----- 1 root wheel 1874 May 8 02:38 index.json
-rw-r----- 1 root wheel 2567937 May 7 02:38 malware_domains.txt
-rw-r----- 1 root wheel 6028981 May 7 02:38 malware_ip.txt
# ls -la
drwxr-x--- 2 root wheel 5 May 8 20:40 .
drwxr-xr-x 24 root wheel 31 May 5 16:22 ..
-rw-r----- 1 root wheel 1874 May 8 20:40 index.json
-rw-r----- 1 root wheel 4586976 May 8 02:38 malware_domains.txt
-rw-r----- 1 root wheel 5998330 May 8 02:38 malware_ip.txt
The widget's 'Updated at' timestamp has a bug in it... it skips exactly one update cadence. So if you're licensed for 24 hours it will show 48. If you're licensed (plus) for 4 hours you will see 8 hours and for premium it will show 40 minutes instead of 20....
We actually solved it today but it wil only be shipped with the next update: https://github.com/opnsense/plugins/issues/5415
Quote from: DEC740airp414user on May 08, 2026, 07:30:04 PMI'm not sure what you mean by pf
My reference to PF is Packet Filter - pf.
I was referring to your Unbound image. I can't see the end of the URL feed_type and assumed you meant the IP feed.
Quote from: lmoore on May 08, 2026, 06:23:52 PMThe main reason to leave Q-Feeds to update just after midnight is to see if the Events would be cleared, which they aren't. It appears there is a hard limit of 50,000 entries and once this is reached, no more entries are recorded.
I see now, these logs are taken from the filter logs. I thought I disabled the logging of the relevant rules later than the time in the Events view. ;)