From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4h4w6z3xGyz2yfc for ; Wed, 22 Jul 2026 13:28:11 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [IPv6:2001:678:b28::25]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail01.haj.ipfire.org", Issuer "YR2" (not verified)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4h4w6w18Qsz2xLl for ; Wed, 22 Jul 2026 13:28:08 +0000 (UTC) Received: from sonic.asd.mail.yahoo.com (sonic-usea5-0027.asd.mail.yahoo.com [34.2.70.26]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mail01.ipfire.org (Postfix) with ESMTPS id 4h4w6t1RnRz795 for ; Wed, 22 Jul 2026 13:28:06 +0000 (UTC) Authentication-Results: mail01.ipfire.org; dkim=pass header.d=cox.net header.s=y1 header.b=Bo9JJ1rx; dmarc=pass (policy=none) header.from=cox.net; spf=neutral (mail01.ipfire.org: 34.2.70.26 is neither permitted nor denied by domain of mentalic@cox.net) smtp.mailfrom=mentalic@cox.net ARC-Seal: i=1; a=rsa-sha256; d=lists.ipfire.org; s=202003rsa; cv=none; t=1784726887; b=VZLw+zBp59vzC8uQ4L0fzwYO+W97R+C48W7S0oJ0yAbX66h9qKD7HpP34rQFs2eNKofuK/ Qiyfwd7hxNHQzBjPZsymSdBFzl1CDJoDxovnWYqXIjpKhMc2109ulJbJknDUTDLTZej/BJ JzMWKNSaPn0q8xsM2fynWPiOWTnB1MFVzCZqZY90hp7PQDmS6C0nvWqJ5T7C3uXZxSILQH HaH94k3wxTGpnJz1mzU57s80FeIhCPQ2cviyKJ1GZYhiidkhUMdqQGSx3AdJQkKj0RAIba veYQLLLp2DsUyTd2MaHMINI0mGBEe/M2r09x5NNcGpimk7B90cWqi8bj6F3LiQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=lists.ipfire.org; s=202003rsa; t=1784726887; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:dkim-signature; bh=QLJPjrLhDVbR9Xk3wbpv1Ra2RoqXCxG8tafFL3Fzh28=; b=UUOrB0B8hijpi53Cla22TRcr8jIcWXnf6Q2u3uRAXMc9vk0E87ngPqAeWQmliqDtgqtQtw DcVjmc6ivMbp5jv2CuhBERNavzFP+UdgR2DieozJFc1O1SPKx8GaOd+BAffA0zden1p7Ax mHeuhJvW4+8haNQCEgyrxibMzA/Gi8tdF62oK69oDXr+oIlR+XT1LvJrxmmDVBNoxD5Xfu 96qMxZmQIpMh8RvoEMQdzcRrHITa0WUzHBfWZHlh4yh3XX5TMNRjV5wbPOE8gSRvRf5OrI DuAZprusWaQWo7m7yNVTC+Gmm1aD9SsFVDDhCKSnXedB1sV7JQyQd+NjjfBfYg== ARC-Authentication-Results: i=1; mail01.ipfire.org; dkim=pass header.d=cox.net header.s=y1 header.b=Bo9JJ1rx; dmarc=pass (policy=none) header.from=cox.net; spf=neutral (mail01.ipfire.org: 34.2.70.26 is neither permitted nor denied by domain of mentalic@cox.net) smtp.mailfrom=mentalic@cox.net DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cox.net; s=y1; t=1784726884; bh=QLJPjrLhDVbR9Xk3wbpv1Ra2RoqXCxG8tafFL3Fzh28=; h=Date:Subject:To:References:From:In-Reply-To:From:Subject:Reply-To; b=Bo9JJ1rxCCBDHMP8/xjIQKDR03bz7EFYOPKRhfoHj7lRMBHkAfxKtaRK6s0OX9z/anTAoskwWnaZOZKKPmOWAfLfQQXrXI+aMCIDVSwI8hHi6393vZC4JEiDCdUxnt/nny2MDun8B798aw+P0PtNP9tC0ZGSfDzCJIBEZJ73Y2/Jp70TVkXANs2ypkAUezK7JBEM+JPAEOnadgsQGFkaJpGycLIhOHtS4WO2a0TPiWDZVVlwsCjz6ox5KqwaIp7fLySYv+WrHKeFugieVt+nZs2FFT7nlCsIrc6q8AbY3jH7eCazas/rncu44ll8I7z3GA9OxcGwSfuqF6ryozS02g== X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1784726884; bh=N5uEO5mjyCrb/8rv5y0lys3C+3pNmSmWXdVtA9Gg3O1=; h=X-Sonic-MF:Date:Subject:To:From:From:Subject; b=YiYd2y0Jx51C1SRyuABROjpjoA0VNuaKWaIsHlTDhHRnDh8KZ06VfMHE4k7NcHwqvqi8cWDEs8wxd0RmQagyGLD3/HbOQtQ0q8KJwSiQa1Pa4yUU0Gqx11no5tBhxo9KlAoBC3BvoOBKcoCT/pTdwScswNLVWSFtk1zEv3LmiTl9p65U0j0SucCJW8QT04QHW43/NcHASWRJL/GlMUwBNbzvwF8TJHPEW9c6uJl2im1Tf/kcoJVhVCdUd8ErVQ40lM/yUThXakW+pjED+BvIBQyyHJcuDnIwFEFwhfQHWhEABM0yvKf+jSrUZNkM1pLlhrVbWrVTBnrDxu8A7B3w5Q== X-YMail-OSG: sZ32nLgVM1kduWhc6fqqE8IymsuiC8kMqIAOvLiXuvvwY34ewrUIzqt3dCEAwg5 0.iXiU5Aev3Mgzi.lyfcyQcCKR8cRCjl.q7wjqNa5HPvD685icf99i9.7rApCJP05ZXt86rUTklj ewsTnas.XhEwIJzZO1RlDEnU_QSs60OpdwYFWE039KHYMTOY.BG8NGmo1exsN8hn0UIGlLCuAZUL 1AggWz6brnUnePjBcqOme19nMfaxO0k0kcc9p8JubQaNl4tEShsUIMeEnjMZDA1CyscSnKrfKAMB ZGGvWD4DCEtkzgFuAUp0OQquhSxsgSn6vbPu7mpkcnCqw5phoplZn4KoibXiOznt40Txj29ZA7vq 1RuGDhj8uYGHiUQZMfD_9pKdScsRDGsP5XtCkdw49oCW2S0BreEpUp.WPfkc2MMi1kscjMsaXEIY FISgeRcQh2EgRYWV1pfjJ7Ezl49d2KhbPCm13b8Qx8j_HVXIKyVjtAtKtu4H587OJWffTqJID8Fb mb11XqpYGmMt2rVUMTAvCoxryBGXG6RKgXcgCvIgF8amZY7hHCy8x2cYliehmlmO1qp_KhXHzENd rAAWzyW7lOsLH.qhkSiZ7tizlmPleUWJXO5esZrQl8i3LbVKr85Yowgz_b_RCYPK6sQFXgNrdBtB .iYJ_PHu0830uMUnwwKT4fy9h1YW4RLK62eq85P.ljcHh3j87m.xHmD48jKxXsBInvOCiG_bmeb6 0LWA5zrhR3rVuiGTn2ccQXYOkKPDMk4Bnc8Uz1bWFlYg12VXwJw5P0HUUwWst9nCBdhtd0eiZ01S VGFa0W0FdU8FLynHl8X0gw7SuiKR5JB.7dLYd7_ItbFnGOkLLH85xGYkSO1E0Pu8PEsVi3mxjVLy jhiKg9IuOqwz_2spLel_JRhXDNOWEhHUuTyZ5r3PSwxIG0EN8aMAeRmb443tjUj_ZazOjmLhODog .QUisZicSOqMBH_FuEeNv2cC7vcaD1IlhZc6tUq6qi2nafSkZZeyw9Mvlnh5R8W1DELRYLYQ7XsO yNsbwdCTQFoTtmJpUlgx6Z0crm.kbyvG7kTH2AAt8.C2C_rfjNLpjXN6vemy.F3YDEWEXcNNkGmQ AVBcUU0m0JKR4DmLg8HQIiVchU0wQ6dgyjKIT7aRulIftEGdaDNnt5J85CyVaqFSAGDPhL0soLL1 uPL7UR0lRry4cZV4wJ5BFOFt4jdyLnwcZDvyVGsmJOZ0eHm6nlPf3Cu4AonMlYNQsK1R9wVF6dZ8 F4_vJAyWvG0YXC6dZSlhUXLswk7JWEvyGP6tVXGGMQMpOmADi9MdZ.Ioil4guy9ZeI209Zy1DaK7 7WXLhUsng58_zSJPpRiLhnPqRs56ehC6f6XDN2ozAAWB.aibpA8iX4QDmhBqx9WG4984J.ESfnFg KT2kRgEyDRKjjZ2prSgICGJJI8V.DhbbWshkVURa3hlUXS53uO_t1_wtJRlHWC6LvpOvDO_dy3h2 6oXRsrWElhKoXCVBA5xcluT4Yi7AIzEak7016z1hneMxIm4S2TKZOTmE8W1E4Dk4VVOcWxDUFnhQ 2kcsRNWBY0I8Rubnprx00yy8RZJmkRk4Uzjuh7LpSkQYdggjnWULyANaga.wQvU6Qci04GV9UgYZ 8geBdP_Y6lMPTqk3Y4X4vGw84rYX2KyAKKt5fCgrqJnFYFbmu_xzIhnjZKwZ_QyQPnymKdd2wNml dhdH_nEeALhJSbtLQZQKLHoSxuF3BEOaft2_QlN0F.VyPF6hpt.1p4X9eHYbIt4ECN5MNZk3paC7 OkWUevf3JQQEHL67GaAf33JMIkM1bfeNhfpqkUimHLONDQBsT8UectltJ30kj4iHHSzbPzNT8UaL tmJbaBJ3jTYXN4.HNFdwmwag064Mhv.qKLCnoKZNeESbwSdp351IUEEt_XxLtu2NjWjhZc3Py2jz x4qQwV1wWdUgVnfh11FVn5NFn4pE5HbI.n8WLFrqAlt86NAzWagNctPvTXCAjd894qOTw4avRikg UBWd1LCRdG2KTbbeTu9n2AA-- X-Sonic-MF: X-Sonic-ID: d40c7502-83b0-4f1a-8d03-9aa8cf9df619 Received: from sonic.gate.mail.ne1.yahoo.com by mail-asdoutdeli-p-cin-usea5-prod-sonicconsumer-svc-101 with HTTP; Wed, 22 Jul 2026 13:28:04 +0000 Received: from dip35.lsn.ne1.yahoo.com ([98.138.183.44]) by hello (SMTP) with SMTP ID 37e1e22af05557807774c80eb67a8f9c for ; Wed, 22 Jul 2026 13:28:02 +0000 (UTC) Message-ID: <249cfa40-47dc-4a9a-9b8b-0e02933d4f34@cox.net> Date: Wed, 22 Jul 2026 08:28:01 -0500 Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: Core 203 - DNS firewall doesn't update (?) or add (!) - zone files To: development@lists.ipfire.org References: <6662cba6-6773-4040-ace7-7be7f8ad3679@ipfire.org> Content-Language: en-US From: Mentalic In-Reply-To: <6662cba6-6773-4040-ace7-7be7f8ad3679@ipfire.org> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Mailer: WebService/1.1.26180 mail.core.serving.mcws.prd.acl:role.token.mcws.jsmtp.yahoo X-Rspamd-Server: mail01.haj.ipfire.org X-Rspamd-Queue-Id: 4h4w6t1RnRz795 X-Rspamd-Action: no action X-Spamd-Result: default: False [-4.30 / 11.00]; BAYES_HAM(-3.00)[100.00%]; DMARC_POLICY_ALLOW(-0.50)[cox.net,none]; RWL_MAILSPIKE_EXCELLENT(-0.40)[34.2.70.26:from]; R_DKIM_ALLOW(-0.20)[cox.net:s=y1]; MX_GOOD(-0.10)[mta6.am0.yahoodns.net]; MIME_GOOD(-0.10)[text/plain]; R_SPF_NEUTRAL(0.00)[?all]; MIME_TRACE(0.00)[0:+]; FREEMAIL_FROM(0.00)[cox.net]; FREEMAIL_ENVFROM(0.00)[cox.net]; ARC_NA(0.00)[]; SUBJECT_HAS_EXCLAIM(0.00)[]; FUZZY_RATELIMITED(0.00)[rspamd.com]; IP_REPUTATION_HAM(0.00)[asn: 15169(-0.29), country: US(-0.01), ip: 34.2.70.26(0.00)]; RCPT_COUNT_ONE(0.00)[1]; RCVD_TLS_LAST(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; DKIM_TRACE(0.00)[cox.net:+]; RCVD_COUNT_TWO(0.00)[2]; TO_DN_NONE(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; FROM_HAS_DN(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[34.2.70.26:from]; ARC_SIGNED(0.00)[lists.ipfire.org:s=202003rsa:i=1]; MID_RHS_MATCH_FROM(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[development@lists.ipfire.org]; ASN(0.00)[asn:15169, ipnet:34.2.70.0/23, country:US]; DKIM_REPUTATION(0.00)[0]; SUBJECT_HAS_QUESTION(0.00)[] Hi, I can verify that the DNS firewall is not working in 203. Ended up going back to 202. Regards Wayne On 7/22/2026 8:02 AM, Matthias Fischer wrote: > Hi, > > I have one problem with Core 203 and I'm not sure whats the culprit: > > No matter what I do, Core 203 won't download additional zone files. > > After rebooting I found the already used and activated blocklists (from > Core 202) in the '/var/lib//knot-resolver/zones' dirextory. They're > working - no seen problem. But even if I activate them all on the DNSBL > page, nothing gets downloaded, the selection and number of block lists > always remain the same. It won't add or remove any of the existing lists. > > Can anyone confirm? OR give me a hint where to look at? > > Thanks in advance > Matthias > >