Q-Feeds Update Interval

Started by lmoore, May 06, 2026, 04:24:50 AM

Previous topic - Next topic
Looking at Security -> Q-Feeds Connect -> Feeds, did the update interval change from 24-hours to 48-hours after the connector was updated to version 1.5_3?

The Q-Feeds Connector update was installed at the same time as OPNsense 26.1.7_3.

We've been able to reproduce unfortunately.
Solution might be rebooting (not sure)

True solution is to empty the folder "/var/db/qfeeds-tables/"
by running these commands:


cd /var/db/qfeeds-tables/
rm *

Bug reported to the developers as well: https://github.com/opnsense/plugins/issues/5428

Your Threat Intelligence Partner  qfeeds.com

Today at 12:26:43 PM #2 Last Edit: Today at 12:33:05 PM by Seimus
Actually I realized this is affecting everyone.

For example I have a PLUS sub, and my refresh interval instead of 4h is set to 8h.



After removing the the content of /var/db/qfeeds-tables/ and re-triggering the feeds download its back to 4h.



Looks like per the OP example and my, the poll rate interval doubles for some reason :D, kinda funny.

Regards,
S.
Networking is love. You may hate it, but in the end, you always come back to it.

OPNSense HW
N355 - i226-V | AQC113C | 16G | 500G - PROD

PRXMX
N5105 - i226-V | 2x8G | 512G - NODE #1
N100 - i226-V | 16G | 1T - NODE #2

Today at 12:50:54 PM #3 Last Edit: Today at 12:53:18 PM by DEC740airp414user
I am a weird one.  rather against installing a lot of plugins.

when I subscribed I opened a ticket and got instructions for manually adding an alias(url table IP) and how to add it as a blocklist to unbound.

--I may have gotten the idea from one of Patricks screen shots of his adguard configuration --

I am not having that issue
DEC740 > USW-Pro-8-PoE> U6-Enterprise
Dec670. Retired / backup device

This more like plugin specific issue.

The Plugin, controls the poll rate per the sub you have. With manually defining the alias or the blocklist the poll interval is shifted outside the Plugin.

Regards,
S.
Networking is love. You may hate it, but in the end, you always come back to it.

OPNSense HW
N355 - i226-V | AQC113C | 16G | 500G - PROD

PRXMX
N5105 - i226-V | 2x8G | 512G - NODE #1
N100 - i226-V | 16G | 1T - NODE #2

Today at 06:23:52 PM #5 Last Edit: Today at 06:31:27 PM by lmoore
QuoteTrue solution is to empty the folder "/var/db/qfeeds-tables/"
by running these commands:

I've made no changes on my end and left it to check at the time listed in the earlier screen-shot.

It is now back to daily updates and the time appears to be around the time I activated the installation - may be just a coincidence.

The main reason to leave Q-Feeds to update just after midnight is to see if the Events would be cleared, which they aren't. It appears there is a hard limit of 50,000 entries and once this is reached, no more entries are recorded.

Do these Events need to be deleted manually?

Quote from: DEC740airp414user on Today at 12:50:54 PMI am a weird one.  rather against installing a lot of plugins.

when I subscribed I opened a ticket and got instructions for manually adding an alias(url table IP) and how to add it as a blocklist to unbound.

--I may have gotten the idea from one of Patricks screen shots of his adguard configuration --

I am not having that issue

Hmm, I would expect blocking a table of IP's would be best performed in PF. I'm not sure how this would benefit Unbound.

Quote from: lmoore on Today at 06:44:31 PM
Quote from: DEC740airp414user on Today at 12:50:54 PMI am a weird one.  rather against installing a lot of plugins.

when I subscribed I opened a ticket and got instructions for manually adding an alias(url table IP) and how to add it as a blocklist to unbound.

--I may have gotten the idea from one of Patricks screen shots of his adguard configuration --

I am not having that issue

Hmm, I would expect blocking a table of IP's would be best performed in PF. I'm not sure how this would benefit Unbound.

I'm not sure what you mean by pf
It's a 75kb app.   I don't think it's that complicated.the only thing I am missing is the widget on the Home Screen


DEC740 > USW-Pro-8-PoE> U6-Enterprise
Dec670. Retired / backup device

Same here. I'm using the community version, and I noticed it only updates every 48 hours. After cleaning the aforementioned directory, the interval dropped to 24 hours. I also noticed that the newly downloaded malware_domains file is nearly twice as large.

# ls -la
drwxr-x---   2 root wheel       5 Apr  7 19:27 .
drwxr-xr-x  24 root wheel      31 May  5 16:22 ..
-rw-r-----   1 root wheel    1874 May  8 02:38 index.json
-rw-r-----   1 root wheel 2567937 May  7 02:38 malware_domains.txt
-rw-r-----   1 root wheel 6028981 May  7 02:38 malware_ip.txt
# ls -la
drwxr-x---   2 root wheel       5 May  8 20:40 .
drwxr-xr-x  24 root wheel      31 May  5 16:22 ..
-rw-r-----   1 root wheel    1874 May  8 20:40 index.json
-rw-r-----   1 root wheel 4586976 May  8 02:38 malware_domains.txt
-rw-r-----   1 root wheel 5998330 May  8 02:38 malware_ip.txt
Note: This post may have been lightly edited by AI for spelling and minor readability improvements. The content and findings are entirely my own.

The widget's 'Updated at' timestamp has a bug in it... it skips exactly one update cadence. So if you're licensed for 24 hours it will show 48. If you're licensed (plus) for 4 hours you will see 8 hours and for premium it will show 40 minutes instead of 20....

We actually solved it today but it wil only be shipped with the next update: https://github.com/opnsense/plugins/issues/5415


Your Threat Intelligence Partner  qfeeds.com