From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <development+bounces-2045-archive=lists.ipfire.org@lists.ipfire.org>
Received: from mail02.haj.ipfire.org (localhost [IPv6:::1])
	by mail02.haj.ipfire.org (Postfix) with ESMTP id 4g5Pm42JZTz330h
	for <archive@lists.ipfire.org>; Wed, 29 Apr 2026 17:43:16 +0000 (UTC)
Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange x25519 server-signature ECDSA (secp384r1 raw public key) server-digest SHA384
	 client-signature RSA-PSS (4096 bits) client-digest SHA256)
	(Client CN "mail01.haj.ipfire.org", Issuer "R12" (not verified))
	by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4g5Pm054wzz2xKR
	for <development@lists.ipfire.org>; Wed, 29 Apr 2026 17:43:12 +0000 (UTC)
Received: from [127.0.0.1] (localhost [127.0.0.1])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256)
	(No client certificate requested)
	by mail01.ipfire.org (Postfix) with ESMTPSA id 4g5Pm0014fz7D7
	for <development@lists.ipfire.org>; Wed, 29 Apr 2026 17:43:11 +0000 (UTC)
DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org;
	s=202003ed25519; t=1777484592;
	h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
	 to:to:cc:mime-version:mime-version:content-type:content-type:
	 content-transfer-encoding:content-transfer-encoding;
	bh=zKTtkocE7zNqprmOeiFdaBigOZrkVUi0MJ0PY16HKZI=;
	b=q63js52NSXLLm5t+lInT1tps5eesFbIHeeCnC4KQPMY4cwOlousqSDk149GtyqbnR98Ku0
	AkjsCzTFw6lIfLCw==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa;
	t=1777484592;
	h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
	 to:to:cc:mime-version:mime-version:content-type:content-type:
	 content-transfer-encoding:content-transfer-encoding;
	bh=zKTtkocE7zNqprmOeiFdaBigOZrkVUi0MJ0PY16HKZI=;
	b=KMeltbni6l4+HM8c+3fXYykBSMD8BCvLShp1vOMOPKM13tirMZn/qXgMeQk99I81LO0QXe
	gI/TG1sKiT8hRjO/RnEmXxg/0H8JOUrzTazlo3MGOXFJjwTSJYiB7JJ4QkTScPNv15ETpy
	KORntrbk6LZ/GVv0MvGbAmpMSVPxW371cd0W9UduzFQ+uOf9kl7xRuukXL5nNyNm3JwJ3V
	2+n27ccwj/VI+x+X/97g4Nc7NxAmkYyrbXFr9PgYRfA/xptoyEJlODIsogLC+lQDjQz3iU
	ap8yTUqKZ0DkN6t0sz3HlVzSybzBQ1vAbb/KfytU5oJi+sMVOxePQfYKB4qWBg==
Message-ID: <1fad9a20-1291-4584-a35e-e0a6251df296@ipfire.org>
Date: Wed, 29 Apr 2026 19:43:09 +0200
Precedence: list
List-Id: <development.lists.ipfire.org>
List-Subscribe: <https://lists.ipfire.org/>,
 <mailto:development+subscribe@lists.ipfire.org?subject=subscribe>
List-Unsubscribe: <https://lists.ipfire.org/>,
 <mailto:development+unsubscribe@lists.ipfire.org?subject=unsubscribe>
List-Post: <mailto:development@lists.ipfire.org>
List-Help: <mailto:development+help@lists.ipfire.org?subject=help>
Sender: <development@lists.ipfire.org>
Mail-Followup-To: <development@lists.ipfire.org>
MIME-Version: 1.0
Content-Language: en-GB
To: IPFire Development <development@lists.ipfire.org>
From: Bernhard Bitsch <bbitsch@ipfire.org>
Subject: Feedback about the DNS FW
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit

Hi,

after using the new DNS FW ( congrats to this nice feature! ), I found 
some issues.
- Each 'save' in WUI page increases the memory consumption. Even if 
nothing changed. A restart of unbound frees this huge allocation.
- Knowing from using Jon's RPZ prototype, I checked whether a single 
reload ( used in DNS FW? ) propagates the changes, new list and/or 
allow/deny entries, really. I found cases where this isn't true. A 
unbound restart yielded the right behaviour.


I must apologize not to have tested the release. But I haven't the 
equipment, yet ( only one production system ).

Regards,
Bernhard