Unbound bringt Fehler bei Black List

[Raxxis]

Guten Tag ,

Ich nutze Aktuell OPNsense in der Version OPNsense 21.1.1-amd64.

Wenn ich im Unbound unter Blacklist eigene eintage bekomme ich nach ein paar sec ein Fenster mit Error 1 .

Und ab und an Startet der Unbound Dienst nicht mehr. Hat jemand eine Ahnung was hier das Problem sein könnte?

[Patrick M. Hausen]

Vielleicht  ;)

Es wäre hilfreich, wenn Du einen Screenshot der Fehlermeldung postest, und natürlich was genau Du da einträgst ...

Gruß
Patrick

[Raxxis]

Achso ja hab ich vergesen.

Hier ein teil der Log:

Code Select Expand

2021-02-22T15:34:16 unbound[6389] [6389:2] info: resolving cdn-0.nflximg.com. A IN
2021-02-22T15:34:16 unbound[13617] blacklist download https://v.firebog.net/hosts/Easylist.txt (lines: 11593 exclude: 0 black: 11593
2021-02-22T15:34:15 unbound[6389] [6389:0] info: query response was ANSWER
2021-02-22T15:34:15 unbound[6389] [6389:0] info: reply from <.> 172.16.0.1#53
2021-02-22T15:34:15 unbound[6389] [6389:0] info: response for v.firebog.net. AAAA IN
2021-02-22T15:34:15 unbound[6389] [6389:0] info: resolving v.firebog.net. AAAA IN
2021-02-22T15:34:15 unbound[6389] [6389:1] info: query response was ANSWER
2021-02-22T15:34:15 unbound[6389] [6389:1] info: reply from <.> 172.16.0.1#53
2021-02-22T15:34:15 unbound[6389] [6389:1] info: response for v.firebog.net. A IN
2021-02-22T15:34:15 unbound[6389] [6389:1] info: resolving v.firebog.net. A IN
2021-02-22T15:34:15 unbound[13617] blacklist download https://any.andryou.com/oisddbl.txt (lines: 1522807 exclude: 0 black: 1522794
2021-02-22T15:34:10 unbound[6389] [6389:3] info: query response was nodata ANSWER
2021-02-22T15:34:10 unbound[6389] [6389:3] info: reply from <.> 172.16.0.1#53
2021-02-22T15:34:10 unbound[6389] [6389:3] info: response for any.andryou.com. AAAA IN
2021-02-22T15:34:10 unbound[6389] [6389:3] info: resolving any.andryou.com. AAAA IN
2021-02-22T15:34:10 unbound[6389] [6389:0] info: query response was ANSWER
2021-02-22T15:34:10 unbound[6389] [6389:0] info: reply from <.> 172.16.0.1#53
2021-02-22T15:34:10 unbound[6389] [6389:0] info: response for any.andryou.com. A IN
2021-02-22T15:34:10 unbound[6389] [6389:0] info: resolving any.andryou.com. A IN
2021-02-22T15:34:10 unbound[13617] blacklist download https://github.com/uBlockOrigin/uAssets/blob/master/filters/privacy.txt (lines: 2102 exclude: 829 black: 1006
2021-02-22T15:34:09 unbound[13617] blacklist download https://github.com/uBlockOrigin/uAssets/blob/master/filters/unbreak.txt (lines: 17419 exclude: 9033 black: 8127
2021-02-22T15:34:09 unbound[6389] [6389:3] info: query response was nodata ANSWER
2021-02-22T15:34:09 unbound[6389] [6389:3] info: reply from <.> 172.16.0.1#53
2021-02-22T15:34:09 unbound[6389] [6389:3] info: response for github.com. AAAA IN
2021-02-22T15:34:09 unbound[6389] [6389:3] info: resolving github.com. AAAA IN
2021-02-22T15:34:09 unbound[6389] [6389:1] info: query response was ANSWER
2021-02-22T15:34:09 unbound[6389] [6389:1] info: reply from <.> 172.16.0.1#53
2021-02-22T15:34:09 unbound[6389] [6389:1] info: response for github.com. A IN
2021-02-22T15:34:09 unbound[6389] [6389:1] info: resolving github.com. A IN
2021-02-22T15:34:09 unbound[13617] blacklist download https://raw.githubusercontent.com/crazy-max/WindowsSpyBlocker/master/data/hosts/extra.txt (lines: 243 exclude: 0 black: 237
2021-02-22T15:34:09 unbound[13617] blacklist download https://raw.githubusercontent.com/crazy-max/WindowsSpyBlocker/master/data/hosts/update.txt (lines: 538 exclude: 0 black: 532
2021-02-22T15:34:09 unbound[13617] blacklist download https://raw.githubusercontent.com/crazy-max/WindowsSpyBlocker/master/data/hosts/spy.txt (lines: 384 exclude: 0 black: 378
2021-02-22T15:34:08 unbound[13617] blacklist download https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts (lines: 71707 exclude: 5 black: 65243
2021-02-22T15:34:08 unbound[6389] [6389:3] info: query response was nodata ANSWER
2021-02-22T15:34:08 unbound[6389] [6389:3] info: reply from <.> 172.16.0.1#53
2021-02-22T15:34:08 unbound[6389] [6389:3] info: response for raw.githubusercontent.com. AAAA IN
2021-02-22T15:34:08 unbound[6389] [6389:3] info: resolving raw.githubusercontent.com. AAAA IN
2021-02-22T15:34:08 unbound[6389] [6389:0] info: query response was ANSWER
2021-02-22T15:34:08 unbound[6389] [6389:0] info: reply from <.> 172.16.0.1#53
2021-02-22T15:34:08 unbound[6389] [6389:0] info: response for raw.githubusercontent.com. A IN
2021-02-22T15:34:08 unbound[6389] [6389:0] info: resolving raw.githubusercontent.com. A IN
2021-02-22T15:34:08 unbound[13617] blacklist download https://justdomains.github.io/blocklists/lists/easyprivacy-justdomains.txt (lines: 7351 exclude: 0 black: 7351
2021-02-22T15:34:08 unbound[13617] blacklist download https://justdomains.github.io/blocklists/lists/easylist-justdomains.txt (lines: 16746 exclude: 0 black: 16746
2021-02-22T15:34:08 unbound[13617] blacklist download https://justdomains.github.io/blocklists/lists/adguarddns-justdomains.txt (lines: 38199 exclude: 0 black: 38199

[Patrick M. Hausen]

Sicher, dass die uBlock Origin Liste für die Verwendung mit Unbound geeignet ist und nicht nur für uBO? Wenn ich eine andere einbinde, z.B. die hier, die gezielt für Unbound ist, dann funktioniert es:

https://gitlab.com/curben/urlhaus-filter/-/raw/master/urlhaus-filter-unbound-online.conf

[Raxxis]

Ich dachte man kann da jede .txt Liste nehem? Hast du noch welche die Gut sind?

Code Select Expand

https://s3.amazonaws.com/lists.disconnect.me/simple_ad.txt
https://github.com/IDKwhattoputhere/uBlock-Filters-Plus/blob/master/uBlock-Filters-Plus.txt
https://gist.githubusercontent.com/BBcan177/4a8bf37c131be4803cb2/raw/d3cc8fb23c52701732a18c663777b26888468a9d/MS-2
https://gist.githubusercontent.com/BBcan177/b6df57cef74e28d90acf1eec93d62d3b/raw/f0996cf5248657ada2adb396f3636be8716b99eb/MS-4
https://raw.githubusercontent.com/crazy-max/WindowsSpyBlocker/master/data/hosts/spy.txt
https://github.com/crazy-max/WindowsSpyBlocker/blob/master/data/hosts/extra.txt
https://github.com/crazy-max/WindowsSpyBlocker/blob/master/data/hosts/extra_v6.txt
https://github.com/crazy-max/WindowsSpyBlocker/blob/master/data/hosts/spy.txt
https://github.com/crazy-max/WindowsSpyBlocker/blob/master/data/hosts/spy_v6.txt
https://github.com/crazy-max/WindowsSpyBlocker/blob/master/data/hosts/update.txt
https://github.com/crazy-max/WindowsSpyBlocker/blob/master/data/hosts/update_v6.txt
https://github.com/crazy-max/WindowsSpyBlocker/blob/master/data/p2p/extra.txt
https://github.com/crazy-max/WindowsSpyBlocker/blob/master/data/p2p/spy.txt
https://github.com/crazy-max/WindowsSpyBlocker/blob/master/data/p2p/update.txt
https://github.com/crazy-max/WindowsSpyBlocker/blob/master/data/kaspersky/extra.txt
https://github.com/crazy-max/WindowsSpyBlocker/blob/master/data/kaspersky/spy.txt
https://github.com/crazy-max/WindowsSpyBlocker/blob/master/data/kaspersky/update.txt
https://someonewhocares.org/hosts/hosts
https://gitlab.com/quidsup/notrack-blocklists/raw/master/notrack-blocklist.txt
https://gitlab.com/quidsup/notrack-blocklists/raw/master/notrack-malware.txt
https://adaway.org/hosts.txt
https://any.andryou.com/oisddbl.txt
https://v.firebog.net/hosts/Easylist.txt
https://raw.githubusercontent.com/uBlockOrigin/uAssets/master/filters/badware.txt
https://raw.githubusercontent.com/uBlockOrigin/uAssets/master/filters/resource-abuse.txt
https://github.com/uBlockOrigin/uAssets/blob/master/filters/annoyances.txt
https://github.com/uBlockOrigin/uAssets/blob/master/filters/badlists.txt
https://github.com/uBlockOrigin/uAssets/blob/master/filters/filters-2020.txt
https://github.com/uBlockOrigin/uAssets/blob/master/filters/filters-2021.txt
https://github.com/uBlockOrigin/uAssets/blob/master/filters/filters.txt
https://github.com/uBlockOrigin/uAssets/blob/master/filters/legacy.txt
https://github.com/uBlockOrigin/uAssets/blob/master/filters/privacy.txt
https://github.com/uBlockOrigin/uAssets/blob/master/filters/unbreak.txt


Die hier hatte ich alle in der Pi-Hole aber das Problem die interne Client NS auflösung ist doof

[Patrick M. Hausen]

Ich dachte man kann da jede .txt Liste nehem? Hast du noch welche die Gut sind?

Nicht, wenn die Liste eine komplett andere Syntax verwendet.

Ich verwende nur die beiden EasyList, Yoyo, und die URLhaus. Korrekte Adresse ist übrigens:
https://curben.gitlab.io/malware-filter/urlhaus-filter-unbound.conf

Ich habe wenig Detailkenntnis dieser Teile, aber mein Bauchgefühl sagt mir, dass man wahrscheinlich mit einer Handvoll Listen mehr als 95% abgedeckt bekommt und mehr und noch mehr Listen irgendwann nichts mehr nützen sondern schlimmstenfalls auf Performance oder Stabilität durchschlagen.