safing / portmaster

🏔 Love Freedom - ❌ Block Mass Surveillance
https://safing.io
GNU General Public License v3.0
8.94k stars 279 forks source link

Portmaster seems to be causing some connections to open very slowly even when they are allowed #1141

Open LoganDark opened 1 year ago

LoganDark commented 1 year ago

What happened:

Sometimes, when sending an HTTP request or opening some other kind of connection, it will just... hang for 5-10 seconds. It's not my internet or the other server, and Portmaster correctly logs and attributes the connection to the right process, it's just... some things are slow. And this is for allowed connections. Like, websites will take a long time to open but will then load quickly, and Discord messages will occasionally take way too long to send, among other random things throughout the system.

What did you expect to happen?:

Portmaster shouldn't delay any allowed connections

How did you reproduce it?:

I have Windows Defender Firewall fully disabled, and I'm using the network over a USB-3-to-Ethernet dongle, if that matters.

I have Portmaster set to prompt for connections that don't have associated rules, but.... these connections are not being prompted. They just... take a few seconds to open even though they are already allowed.

Debug Information:

Version 1.0.7 ``` Portmaster version 1.0.7 commit tags/v1.0.7-0-gdc5dd359bfef1e739ef06fd439d1df15e3603c7c built with go1.19 (gc) windows/amd64 using options main.go by user@docker on 21.02.2023 Licensed under the AGPLv3 license. The source code is available here: https://github.com/safing/portmaster ```
Platform: Microsoft Windows 10 Home 10.0.19041 Build 19041 ``` System: Microsoft Windows 10 Home windows (Standalone Workstation) 10.0.19041 Build 19041 Kernel: 10.0.19041 Build 19041 x86_64 ```
Status: Trusted ``` ActiveSecurityLevel: Trusted SelectedSecurityLevel: Off ThreatMitigationLevel: Trusted CaptivePortal: OnlineStatus: Online ```
Config: 11 ``` core/automaticUpdates: false core/expertiseLevel: developer dns/nameserverRetryRate: 30 dns/nameservers: [redacted] dns/noAssignedNameservers: 7 dns/noInsecureProtocols: 7 filter/blockInbound: 6 filter/defaultAction: ask filter/endpoints: [redacted] filter/lists: [TRAC MAL DECEP BAD CB-MW WSP SH-CRL SH-OCSP UNBREAK] spn/use: false ```
Resolvers: 10/10 ``` Cloudflare (dot://cloudflare-dns.com:853#config) dot://cloudflare-dns.com:853#config Failing: false Cloudflare (dot://cloudflare-dns.com:853#config) dot://cloudflare-dns.com:853#config Failing: false 2606:4700:4700::1111 (dns://2606:4700:4700::1111:53#system) dns://2606:4700:4700::1111:53#system Failing: false 2606:4700:4700::1001 (dns://2606:4700:4700::1001:53#system) dns://2606:4700:4700::1001:53#system Failing: false 2001:4860:4860::8888 (dns://2001:4860:4860::8888:53#system) dns://2001:4860:4860::8888:53#system Failing: false 2001:4860:4860::8844 (dns://2001:4860:4860::8844:53#system) dns://2001:4860:4860::8844:53#system Failing: false 1.1.1.1 (dns://1.1.1.1:53#system) dns://1.1.1.1:53#system Failing: false 1.0.0.1 (dns://1.0.0.1:53#system) dns://1.0.0.1:53#system Failing: false 8.8.8.8 (dns://8.8.8.8:53#system) dns://8.8.8.8:53#system Failing: false 8.8.4.4 (dns://8.8.4.4:53#system) dns://8.8.4.4:53#system Failing: false ```
SPN: disabled (module disabled) ``` HomeHubID: HomeHubName: HomeHubIP: Transport: --- Client: true PublicHub: false HubHasIPv4: false HubHasIPv6: false ```
Compatibility: WFP State (19) ``` Edge traversal Teredo Authorization Sublayer SubLayer Edge traversal Teredo Authorization Sublayer {7b6b11f6-cbb5-433c-ae06-6a4f0076e49e} IPxlat Forward IPv4 filter Callout Filters forwarded IPv4 packets into synthetic IPv6 packets {b255c296-7e0c-4115-95f3-b7f24a8a1162} [no provider key] FWPM_LAYER_IPFORWARD_V4 IPxlat Forward IPv4 sub layer SubLayer Sub layer for filtering forwarded IPv4 packets into synthetic IPv6 packets {4351e497-5d8b-46bc-86d9-abccdb868d6d} IPxlat Inbound IPv6 filter Callout Filters incoming IPv6 packets into synthetic IPv4 packets {93bb703d-0502-42e2-8e30-a14576e5085d} [no provider key] FWPM_LAYER_INBOUND_IPPACKET_V6 IPxlat Inbound IPv6 sub layer SubLayer Sub layer for filtering incoming IPv6 packets into synthetic IPv4 packets {dfb035ca-c2a7-4684-97b6-4dbc57c63590} IPxlat Outbound IPv4 filter Callout Filters outgoing IPv4 packets into synthetic IPv6 packets {66d52657-1979-4e58-b3f7-4756434c4880} [no provider key] FWPM_LAYER_OUTBOUND_IPPACKET_V4 IPxlat Outbound IPv4 sub layer SubLayer Sub layer for filtering outgoing IPv4 packets into synthetic IPv6 packets {d3e70856-fc90-4c0a-b9b2-a6f73e20b5cc} PortmasterInboundV4Callout Callout This callout is used by the Portmaster to intercept inbound IPv4 traffic. {05c55149-4732-4857-8d10-f178f3a06f8c} [no provider key] FWPM_LAYER_INBOUND_IPPACKET_V4 PortmasterInboundV4Filter Filter This filter is used by the Portmaster to intercept inbound IPv4 traffic. {4d24331c-a656-4b98-9d9f-266eff2a533e} [no provider key] FWPM_LAYER_INBOUND_IPPACKET_V4 {a87fb472-fc68-4805-8559-c6ae774773e0} PortmasterInboundV6Callout Callout This callout is used by the Portmaster to intercept inbound IPv6 traffic. {ceff1df7-2baa-44c5-a6e5-73a95849bcff} [no provider key] FWPM_LAYER_INBOUND_IPPACKET_V6 PortmasterInboundV6Filter Filter This filter is used by the Portmaster to intercept inbound IPv6 traffic. {006c4a4a-3066-45ce-8360-90c48555c66b} [no provider key] FWPM_LAYER_INBOUND_IPPACKET_V6 {a87fb472-fc68-4805-8559-c6ae774773e0} PortmasterOutboundV4Callout Callout This callout is used by the Portmaster to intercept outbound IPv4 traffic. {41162b9e-8473-4b88-a5eb-04cf1d276b06} [no provider key] FWPM_LAYER_OUTBOUND_IPPACKET_V4 PortmasterOutboundV4Filter Filter This filter is used by the Portmaster to intercept outbound IPv4 traffic. {b69fe9ab-6ca2-422a-a246-41367aa04a06} [no provider key] FWPM_LAYER_OUTBOUND_IPPACKET_V4 {a87fb472-fc68-4805-8559-c6ae774773e0} PortmasterOutboundV6Callout Callout This callout is used by the Portmaster to intercept outbound IPv6 traffic. {32bad112-6af4-4109-809b-c07570ba01b4} [no provider key] FWPM_LAYER_OUTBOUND_IPPACKET_V6 PortmasterOutboundV6Filter Filter This filter is used by the Portmaster to intercept outbound IPv6 traffic. {8888fde4-e98b-4133-ab83-8d5b45a43405} [no provider key] FWPM_LAYER_OUTBOUND_IPPACKET_V6 {a87fb472-fc68-4805-8559-c6ae774773e0} PortmasterSublayer SubLayer The Portmaster sublayer holds all it's filters. {a87fb472-fc68-4805-8559-c6ae774773e0} Private Internet Access Firewall Provider Implements privacy filtering features of Private Internet Access. {08de3850-a416-4c47-b3ad-657c5ef140fb} Private Internet Access Firewall SubLayer Implements privacy filtering features of Private Internet Access. {f31e288d-de5a-4522-9458-de14ebd0a3f8} Teredo socket option opt out block filter Filter [no description] {452c2f19-bef9-4738-bcf5-04f97ee5f04e} {3b4cc995-4067-4d73-914c-31c2ccf09530} FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V6 {7b6b11f6-cbb5-433c-ae06-6a4f0076e49e} ```
Notifications Module Error ``` Message: panic: runtime error: invalid memory address or nil pointer dereference Timestamp: 2023-03-21 10:46:22.9235129 -0700 PDT m=+748805.290658501 ModuleName: notifications TaskName: notification action execution TaskType: worker Severity: panic PanicValue: runtime error: invalid memory address or nil pointer dereference StackTrace: goroutine 1314617 [running]: runtime/debug.Stack() /usr/local/go/src/runtime/debug/stack.go:24 +0x65 github.com/safing/portbase/modules.(*Module).NewPanicError(0xc00018a8c0, {0xb27fc0, 0x1d}, {0xaf5879, 0x6}, {0xa10f40?, 0x1254ec0}) /home/user/git/safing/portbase/modules/error.go:61 +0x94 github.com/safing/portbase/modules.(*Module).runWorker.func1() /home/user/git/safing/portbase/modules/worker.go:121 +0x71 panic({0xa10f40, 0x1254ec0}) /usr/local/go/src/runtime/panic.go:884 +0x212 github.com/safing/portmaster/profile.GetLocalProfile({0xc0026446f0, 0x24}, {0x0, 0x0}, 0x0) /home/user/git/safing/portmaster/profile/get.go:133 +0xa27 github.com/safing/portmaster/firewall.saveResponse(0xc0007d21e0?, 0xc001973a20, {0xc000524bb0, 0x10}) /home/user/git/safing/portmaster/firewall/prompt.go:263 +0x145 github.com/safing/portmaster/firewall.createPrompt.func1({0xc0022ad0e0?, 0xc0001b5680?}, 0xc00113fe88?) /home/user/git/safing/portmaster/firewall/prompt.go:191 +0x32 github.com/safing/portbase/notifications.(*Notification).selectAndExecuteAction.func1({0xc9b1b8?, 0xc000731900?}) /home/user/git/safing/portbase/notifications/notification.go:461 +0x2e github.com/safing/portbase/modules.(*Module).runWorker(0x0?, {0xb27fc0?, 0xca4290?}, 0xc000709720?) /home/user/git/safing/portbase/modules/worker.go:130 +0x93 github.com/safing/portbase/modules.(*Module).RunWorker(0x1746b7?, {0xb27fc0?, 0xc0007095e0?}, 0xc00113ffb8?) /home/user/git/safing/portbase/modules/worker.go:52 +0x77 github.com/safing/portbase/modules.(*Module).StartWorker.func1() /home/user/git/safing/portbase/modules/worker.go:27 +0x4a created by github.com/safing/portbase/modules.(*Module).StartWorker /home/user/git/safing/portbase/modules/worker.go:26 +0xac ```
Unexpected Logs ``` 230321 09:30:26.418 ate/tables:037 > WARN 113 state: failed to get UDP6 socket table: insufficient buffer error (tried 5 times): provided 1024 bytes; required 1328 bytes - [NT 0x7A] The operation completed successfully. ```
Updates: stable (6/29) ``` Active: all/intel/geoip/geoipv4.mmdb.gz: 20230102.9.32 all/intel/geoip/geoipv6.mmdb.gz: 20230102.13.14 all/intel/portmaster/notifications.yaml: 20230227.8.35 all/ui/modules/assets.zip: 0.3.1 all/ui/modules/portmaster.zip: 0.4.5 windows_amd64/kext/portmaster-kext.sys: 1.0.17 Selected: all/intel/geoip/geoipv4.mmdb.gz: 20230102.9.32 all/intel/geoip/geoipv4.mmdb: 20230102.9.32 all/intel/geoip/geoipv6.mmdb.gz: 20230102.13.14 all/intel/geoip/geoipv6.mmdb: 20230102.13.14 all/intel/lists/base.dsdl: 20230301.0.3 all/intel/lists/index.dsd: 2022.6.7 all/intel/lists/intermediate.dsdl: 20230305.0.1 all/intel/lists/urgent.dsdl: 20230311.15.1 all/intel/portmaster/notifications.yaml: 20230227.8.35 all/intel/spn/main-intel.yaml: 20230310.10.36 all/ui/modules/assets.zip: 0.3.1 all/ui/modules/base.zip: 0.2.11 all/ui/modules/console.zip: 0.1.11 all/ui/modules/monitor.zip: 0.2.4 all/ui/modules/portmaster.zip: 0.4.5 all/ui/modules/profilemgr.zip: 0.1.7 all/ui/modules/settings.zip: 0.1.8 windows_amd64/app/portmaster-app.zip: 0.2.5 windows_amd64/core/portmaster-core.exe: 1.0.7 windows_amd64/hub/spn-hub.exe: 0.6.2 windows_amd64/jess/jess.exe: 0.3.1 windows_amd64/kext/portmaster-kext.dll: 1.0.14 windows_amd64/kext/portmaster-kext.pdb: 1.0.17 windows_amd64/kext/portmaster-kext.sys: 1.0.17 windows_amd64/notifier/portmaster-notifier.exe: 0.3.5 windows_amd64/notifier/portmaster-snoretoast.exe: 0.6.0 windows_amd64/notifier/portmaster-wintoast.dll: 0.1.4 windows_amd64/packages/portmaster-installer.exe: 1.0.0 windows_amd64/start/portmaster-start.exe: 1.0.2 ```
Goroutine Stack !["Comment is too long (maximum is 65536 characters)", "There was an error creating your Issue: body is too long (maximum is 65536 characters)."](https://user-images.githubusercontent.com/4723091/226697837-77e677bf-f919-496f-bd3f-ec590cf7e434.png)
LoganDark commented 1 year ago

Okay, now it's slow enough that when I started the portmaster app, it said the core service was not running for a second before it finally opened—and it's been trying to load the network activity for over a minute...

image

And the only "warning" is just a false alarm that cannot be dismissed in any way

image

working-name commented 1 year ago

Hello, just another user here. Welcome to hell.

On windows PM drops the ball terribly. The slow-down is because it intermittently answers (tested it out via WSL2's dig and windows' nslookup) DNS requests. Might be a throttling thing, might be a bug, no clue. So your software (Discord, whatever) spends a ridiculous amount of time attempting to resolve a hostname to an IP, but once it does the traffic flows because it's not your internet, it's PM.

At least that's my working theory at the moment.

I've played around with the resolvers, pointed PM at my own pihole install, pretty much everything I could think of. At this point I'm using Cloudflare's DNS which seems to be ok-ish in terms of speed. Using a privacy enabled DNS resolver like dnswatch or something results in almost an annoying amount of wait time.

I am glad to see your install detects the right exe making the requests. On my end everything is garbled and PM is 100% useless. But I'm on windows 11. So, a word of warning if you're planning on upgrading to 11.

LoganDark commented 1 year ago

I am glad to see your install detects the right exe making the requests

Oh, it doesn't. It sometimes decides Discord is trying to connect to Hacker News, or random Parsec domains are being accessed under "Other Connections". Why does it randomly get confused? No idea.

a word of warning if you're planning on upgrading to 11.

I use Portmaster on another computer running 11 and it works great.

working-name commented 1 year ago

Oh, it doesn't. It sometimes decides Discord is trying to connect to Hacker News, or random Parsec domains are being accessed under "Other Connections". Why does it randomly get confused? No idea.

Devs have no clue yet either, I opened 3 different tickets that ultimately stem from that problem. But now I'm sad because I thought Windows 10 was working fine.

I use Portmaster on another computer running 11 and it works great.

Well that's cool! Do you have WSL on it? Anything special about it?

LoganDark commented 1 year ago

Well that's cool! Do you have WSL on it? Anything special about it?

Yes, I have WSL 2 on it I believe. Not sure about "special" unless a liberal debloating (i.e. uninstalling Cortana, Windows Defender etc.) counts. It's a fresh install, home upgraded to professional, because I didn't trust the OEM install

LoganDark commented 1 year ago

It's caused by portmaster having a long uptime on a system that has a very very very active network

I know because the portmaster interface (the api used by the electron app) will start getting veeeeery slow and constantly freeze and portmaster will have to be restarted, except it will refuse to restart and there will be 2 core processes running because the old one cannot shut down on its own for some reason, so I have to kill it in task manager before the new one will take over and start working properly and suddenly everything is super fast and snappy again.

This is annoying because the new core will have forgotten the most recent dns requests and think everything is connecting to ips, but if I wait for the stupid prompts to time out then the next time any app retries its request, portmaster will catch on properly.

I think this is just stupid log bloat with o(n) or worse algorithms. Portmaster needs to have an eviction strategy

dhaavi commented 1 year ago

Hey @LoganDark, thanks for reporting this.

We have both fixed the process attribution on v1.0.11 as well as improved performance of handling connections. You can switch to beta to get it now or wait until next week: https://wiki.safing.io/en/FAQ/SwitchReleaseChannel

When you get the update, please report back whether the issues are fixed on your side too.

LoganDark commented 1 year ago

improved performance of handling connections

Does latency no longer scale with the size of the connections log? The UI gets really really slow when there are lots of connections in the log, even though it is paginated. It would be nice to evict old entries or provide a manual clear without having to restart Portmaster (which will refuse to shutdown cleanly if the connection log is too large already).

LoganDark commented 1 year ago

fixed the process attribution on v1.0.11

Awesome, you regresssed it terribly :3

chrome_D3v7agid3E

portmaster-app_v0-2-5_9FAIbzyejj

It's even worse now and I have to turn prompt notifications off completely because of how broken Portmaster just became.

Since Portmaster doesn't support downgrading, I guess I'm stuck like this. (This is why I generally don't update software that works...)

dhaavi commented 1 year ago

I've moved this to https://github.com/safing/portmaster/issues/1157 - please stay on topic.

LoganDark commented 1 year ago

@dhaavi sorry I replied to your comment with something that directly addressed something you said. it wasn't me intentionally going off-topic.

dhaavi commented 1 year ago

@LoganDark Yes, you are right. I should not have brought the other issue into here myself.

dhaavi commented 1 year ago

Does latency no longer scale with the size of the connections log?

Yes, for the handling of connections in the core service - if the fix works as intended. CPU usage should not spike with many connections anymore.

No, for displaying connections in the UI, as more data to search/render is also always more work. This does not mean there is no room for improvement in the future.

It would be nice to evict old entries or provide a manual clear without having to restart Portmaster

This is a good idea. I will look into this.

which will refuse to shutdown cleanly if the connection log is too large already).

Please open a new issue for this, if this is consistent behavior.

LoganDark commented 1 year ago

No, for displaying connections in the UI, as more data to search/render is also always more work. This does not mean there is no room for improvement in the future.

Why are you processing the entire log when pagination means you only need to process a few tens of entries each load? (+ however many for the graph, of course)

Should this be a separate issue?

LoganDark commented 1 year ago

So I tried to do a random google search and it looks like this issue is getting much much worse:

chrome_TMBRzEygdn

chrome_hqpiXynB9D

Debug information:

Version 1.0.12 ``` Portmaster version 1.0.12 commit tags/v1.0.12-0-g0562180ba9da2d424711c3eca9a80a66ab18dd70 built with go1.19 (gc) windows/amd64 using options main.go by user@docker on 06.04.2023 Licensed under the AGPLv3 license. The source code is available here: https://github.com/safing/portmaster ```
Platform: Microsoft Windows 10 Home 10.0.19041 Build 19041 ``` System: Microsoft Windows 10 Home windows (Standalone Workstation) 10.0.19041 Build 19041 Kernel: 10.0.19041 Build 19041 x86_64 ```
Status: Trusted ``` ActiveSecurityLevel: Trusted SelectedSecurityLevel: Off ThreatMitigationLevel: Trusted CaptivePortal: OnlineStatus: Online ```
Resolvers: 10/10 ``` Cloudflare (dot://cloudflare-dns.com:853#config) dot://cloudflare-dns.com:853#config Failing: false Cloudflare (dot://cloudflare-dns.com:853#config) dot://cloudflare-dns.com:853#config Failing: false 2606:4700:4700::1111 (dns://2606:4700:4700::1111:53#system) dns://2606:4700:4700::1111:53#system Failing: false 2606:4700:4700::1001 (dns://2606:4700:4700::1001:53#system) dns://2606:4700:4700::1001:53#system Failing: false 2001:4860:4860::8888 (dns://2001:4860:4860::8888:53#system) dns://2001:4860:4860::8888:53#system Failing: false 2001:4860:4860::8844 (dns://2001:4860:4860::8844:53#system) dns://2001:4860:4860::8844:53#system Failing: false 1.1.1.1 (dns://1.1.1.1:53#system) dns://1.1.1.1:53#system Failing: false 1.0.0.1 (dns://1.0.0.1:53#system) dns://1.0.0.1:53#system Failing: false 8.8.8.8 (dns://8.8.8.8:53#system) dns://8.8.8.8:53#system Failing: false 8.8.4.4 (dns://8.8.4.4:53#system) dns://8.8.4.4:53#system Failing: false ```
Network: 50/58 [~0] Connections ``` ProfileName: Chromium Profile: d54fe107-0a0d-4504-8b37-afce25bdc172 Source: local ProcessName: chrome.exe BinaryPath: C:\Users\LoganDark\AppData\Local\Chromium\Application\chrome.exe CmdLine: "C:\Users\LoganDark\AppData\Local\Chromium\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --use-angle=d3d9 --start-stack-profiler --mojo-platform-channel-handle=2272 --field-trial-handle=1896,i,13205770638403356670,16579079666078052707,131072 --enable-features=CanvasOopRasterization,CompositorThreadedScrollbarScrolling,DisableQRGenerator,ElasticOverscroll,EnableDrDc,OverlayScrollbar,SystemNotifications --disable-features=HardwareMediaKeyHandling,Journeys,OverscrollHistoryNavigation /prefetch:8 PID: 16340 accepted 2601:1c0:5b02:4080:d5b5:f987:f4b8:7e76:65008 UDP> 2607:f8b0:400e:c09::5f:443 to signaler-pa.clients6.google.com. 22:15:45-22:25:49 P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 2601:1c0:5b02:4080:d5b5:f987:f4b8:7e76:50615 UDP> 2607:f8b0:400e:c03::65:443 to chat.google.com. 22:21:19-22:31:24 P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 10.0.0.80:32191 TCP> 162.159.133.234:443 to gateway.discord.gg. 22:21:45-22:25:39 P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 2601:1c0:5b02:4080:d5b5:f987:f4b8:7e76:57129 UDP> 2607:f8b0:400e:c09::5e:443 to ssl.gstatic.com. 22:23:21-22:23:54 P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 2601:1c0:5b02:4080:d5b5:f987:f4b8:7e76:50476 UDP> 2607:f8b0:400e:c02::5f:443 to peoplestack-pa.clients6.google.com. 22:23:36-22:24:14 P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 2601:1c0:5b02:4080:d5b5:f987:f4b8:7e76:65073 UDP> 2607:f8b0:400e:c09::5e:443 to ssl.gstatic.com. 22:23:52-22:25:29 P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 2601:1c0:5b02:4080:d5b5:f987:f4b8:7e76:63846 UDP> 2607:f8b0:400e:c09::5f:443 to signaler-pa.clients6.google.com. 22:23:54-22:24:29 P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 2601:1c0:5b02:4080:d5b5:f987:f4b8:7e76:53520 UDP> 2607:f8b0:400e:c09::5f:443 to signaler-pa.clients6.google.com. 22:24:56-22:25:29 P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 10.0.0.80:32249 TCP> 162.159.130.234:443 to gateway.discord.gg. 22:25:09-22:28:49 P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 2601:1c0:5b02:4080:d5b5:f987:f4b8:7e76:62983 UDP> 2607:f8b0:400e:c09::5e:443 to ssl.gstatic.com. 22:25:25-22:25:59 P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 2601:1c0:5b02:4080:d5b5:f987:f4b8:7e76:63456 UDP> 2607:f8b0:400e:c09::5e:443 to ssl.gstatic.com. 22:25:56-22:27:39 P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 2601:1c0:5b02:4080:d5b5:f987:f4b8:7e76:49941 UDP> 2607:f8b0:400e:c09::5f:443 to signaler-pa.clients6.google.com. 22:25:57-22:26:34 P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 10.0.0.80:32273 TCP> 209.216.230.240:443 to news.ycombinator.com. 22:26:06-22:28:29 P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 2601:1c0:5b02:4080:d5b5:f987:f4b8:7e76:54422 UDP> 2607:f8b0:400e:c09::5f:443 to signaler-pa.clients6.google.com. 22:26:58-22:27:59 P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 2601:1c0:5b02:4080:d5b5:f987:f4b8:7e76:52279 UDP> 2607:f8b0:400e:c08::54:443 to accounts.google.com. 22:27:23-22:27:59 P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 2601:1c0:5b02:4080:d5b5:f987:f4b8:7e76:57503 UDP> 2607:f8b0:400e:c09::5e:443 to ssl.gstatic.com. 22:27:38-22:28:09 P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 2601:1c0:5b02:4080:d5b5:f987:f4b8:7e76:60062 UDP> 2607:f8b0:400e:c09::6a:443 to www.google.com. 22:27:43-22:28:39 P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 2601:1c0:5b02:4080:d5b5:f987:f4b8:7e76:49695 UDP> 2607:f8b0:400e:c06::5e:443 to www.gstatic.com. 22:27:44-22:28:19 P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 2601:1c0:5b02:4080:d5b5:f987:f4b8:7e76:64106 UDP> 2607:f8b0:400e:c09::6a:443 to www.google.com. 22:27:44-22:28:19 P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 10.0.0.80:32325 TCP> 81.169.152.96:443 to blacklist.tampermonkey.net. 22:28:00-22:28:19 P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 10.0.0.80:32326 TCP> 81.169.152.96:443 to blacklist.tampermonkey.net. 22:28:00-22:28:39 P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 2601:1c0:5b02:4080:d5b5:f987:f4b8:7e76:61092 UDP> 2607:f8b0:400e:c09::5e:443 to ssl.gstatic.com. 22:28:08-22:30:04 P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 2601:1c0:5b02:4080:d5b5:f987:f4b8:7e76:61495 UDP> 2607:f8b0:400e:c06::5e:443 to www.gstatic.com. 22:28:19-22:28:39 P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 10.0.0.80:32344 TCP> 162.159.130.234:443 to gateway.discord.gg. 22:28:23-22:32:29 P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 2601:1c0:5b02:4080:d5b5:f987:f4b8:7e76:50757 UDP> 2607:f8b0:400e:c06::5f:443 to signaler-pa.clients6.google.com. 22:28:23-22:28:59 P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 10.0.0.80:63334 UDP> 162.159.135.232:443 to discord.com. 22:28:25-22:28:59 P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 10.0.0.80:32347 TCP> 198.244.212.6:443 to www.glowdental.co.uk. 22:28:26-22:28:39 P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 10.0.0.80:32348 TCP> 198.244.212.6:443 to www.glowdental.co.uk. 22:28:26-22:28:39 P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 10.0.0.80:50060 UDP> 198.244.212.6:443 to www.glowdental.co.uk. 22:28:27-22:28:39 P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 10.0.0.80:54922 UDP> 198.244.212.6:443 to www.glowdental.co.uk. 22:28:27-22:28:39 P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 blocked 10.0.0.80:32362 TCP> 104.100.168.72:443 to p.typekit.net. 22:28:28-22:28:34 P#16340 [EM] p.typekit.net. in activated lists AGD and in deactivated lists BYX, DCT - by filter/lists @ global blocked 10.0.0.80:32365 TCP> 104.100.168.72:443 to p.typekit.net. 22:28:28-22:28:34 P#16340 [EM] p.typekit.net. in activated lists AGD and in deactivated lists BYX, DCT - by filter/lists @ global blocked 10.0.0.80:32360 TCP> 104.100.168.72:443 to p.typekit.net. 22:28:28-22:28:34 P#16340 [EM] p.typekit.net. in activated lists AGD and in deactivated lists BYX, DCT - by filter/lists @ global blocked 10.0.0.80:32364 TCP> 104.100.168.72:443 to p.typekit.net. 22:28:28-22:28:34 P#16340 [EM] p.typekit.net. in activated lists AGD and in deactivated lists BYX, DCT - by filter/lists @ global blocked 10.0.0.80:32367 TCP> 104.100.168.107:443 to p.typekit.net. 22:28:30-22:28:39 P#16340 [EM] p.typekit.net. in activated lists AGD and in deactivated lists BYX, DCT - by filter/lists @ global blocked 10.0.0.80:32366 TCP> 104.100.168.107:443 to p.typekit.net. 22:28:30-22:28:39 P#16340 [EM] p.typekit.net. in activated lists AGD and in deactivated lists BYX, DCT - by filter/lists @ global blocked 10.0.0.80:32368 TCP> 104.100.168.107:443 to p.typekit.net. 22:28:30-22:28:39 P#16340 [EM] p.typekit.net. in activated lists AGD and in deactivated lists BYX, DCT - by filter/lists @ global blocked 10.0.0.80:32369 TCP> 104.100.168.107:443 to p.typekit.net. 22:28:30-22:28:39 P#16340 [EM] p.typekit.net. in activated lists AGD and in deactivated lists BYX, DCT - by filter/lists @ global accepted 2601:1c0:5b02:4080:d5b5:f987:f4b8:7e76:60623 UDP> 2607:f8b0:400e:c06::5f:443 to signaler-pa.clients6.google.com. 22:29:24-22:29:59 P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 2601:1c0:5b02:4080:d5b5:f987:f4b8:7e76:53807 UDP> 2607:f8b0:400e:c08::5f:443 to peoplestack-pa.clients6.google.com. 22:29:34-22:30:09 P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 2601:1c0:5b02:4080:d5b5:f987:f4b8:7e76:57227 UDP> 2607:f8b0:400e:c07::be:443 to www.youtube.com. 22:29:37-22:30:29 P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 2601:1c0:5b02:4080:d5b5:f987:f4b8:7e76:63666 UDP> 2607:f8b0:400e:c09::5e:443 to ssl.gstatic.com. 22:30:03-22:31:54 P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 2601:1c0:5b02:4080:d5b5:f987:f4b8:7e76:57028 UDP> 2607:f8b0:400e:c06::5f:443 to signaler-pa.clients6.google.com. 22:30:25-22:31:04 P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 2601:1c0:5b02:4080:d5b5:f987:f4b8:7e76:55031 UDP> 2607:f8b0:400e:c02::65:443 to aa.google.com. 22:31:23-22:31:59 P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 2601:1c0:5b02:4080:d5b5:f987:f4b8:7e76:51033 UDP> 2607:f8b0:400e:c06::5f:443 to signaler-pa.clients6.google.com. 22:31:27-22:32:04 P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 2601:1c0:5b02:4080:d5b5:f987:f4b8:7e76:59637 UDP> 2607:f8b0:400e:c08::5f:443 to peoplestack-pa.clients6.google.com. 22:31:34-22:32:09 P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 10.0.0.80:32487 TCP> 81.169.152.96:443 to blacklist.tampermonkey.net. 22:31:43-22:31:59 P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 2601:1c0:5b02:4080:d5b5:f987:f4b8:7e76:63184 UDP> 2607:f8b0:400e:c09::5e:443 to ssl.gstatic.com. 22:31:52-22:33:49 P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 10.0.0.80:32491 TCP> 162.159.130.234:443 to gateway.discord.gg. 22:32:00- P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 2601:1c0:5b02:4080:d5b5:f987:f4b8:7e76:63294 UDP> 2607:f8b0:400e:c0d::5f:443 to signaler-pa.clients6.google.com. 22:32:28-22:33:04 P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 10.0.0.80:32509 TCP> 192.30.255.112:443 to github.com. 22:32:52- P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 10.0.0.80:32510 TCP> 185.199.109.154:443 to github.githubassets.com. 22:32:54- P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 10.0.0.80:32515 TCP> 185.199.109.154:443 to github.githubassets.com. 22:32:55- P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 10.0.0.80:32514 TCP> 140.82.114.26:443 to alive.github.com. 22:32:55- P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 10.0.0.80:32527 TCP> 54.231.139.129:443 to github-production-user-asset-6210df.s3.amazonaws.com. 22:33:09- P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 10.0.0.80:32528 TCP> 54.231.139.129:443 to github-production-user-asset-6210df.s3.amazonaws.com. 22:33:10- P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 2601:1c0:5b02:4080:d5b5:f987:f4b8:7e76:60794 UDP> 2607:f8b0:400e:c08::5f:443 to signaler-pa.clients6.google.com. 22:33:29- P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 accepted 2601:1c0:5b02:4080:d5b5:f987:f4b8:7e76:49179 UDP> 2607:f8b0:400e:c09::5e:443 to ssl.gstatic.com. 22:33:45- P#16340 [EM] allowed by default action - by filter/defaultAction @ core:profiles/local/d54fe107-0a0d-4504-8b37-afce25bdc172 ```
Notifications Module Error ``` Message: panic: runtime error: invalid memory address or nil pointer dereference Timestamp: 2023-04-13 22:33:52.8153583 -0700 PDT m=+232503.696408301 ModuleName: notifications TaskName: notification action execution TaskType: worker Severity: panic PanicValue: runtime error: invalid memory address or nil pointer dereference StackTrace: goroutine 760540 [running]: runtime/debug.Stack() /usr/local/go/src/runtime/debug/stack.go:24 +0x65 github.com/safing/portbase/modules.(*Module).NewPanicError(0xc00018a8c0, {0x1831e27, 0x1d}, {0x18004bf, 0x6}, {0x1718440?, 0x1f71080}) /home/user/git/safing/portbase/modules/error.go:61 +0x94 github.com/safing/portbase/modules.(*Module).runWorker.func1() /home/user/git/safing/portbase/modules/worker.go:121 +0x71 panic({0x1718440, 0x1f71080}) /usr/local/go/src/runtime/panic.go:884 +0x212 github.com/safing/portmaster/profile.GetLocalProfile({0xc00135ea20, 0x24}, {0x0, 0x0}, 0x0) /home/user/git/safing/portmaster/profile/get.go:133 +0xa27 github.com/safing/portmaster/firewall.saveResponse(0x2030001?, 0xc001b078c0, {0xc001dfaf20, 0x10}) /home/user/git/safing/portmaster/firewall/prompt.go:263 +0x145 github.com/safing/portmaster/firewall.createPrompt.func1({0x2c2a5f337d0?, 0x2c2a5ded100?}, 0x2c2a5ded100?) /home/user/git/safing/portmaster/firewall/prompt.go:191 +0x32 github.com/safing/portbase/notifications.(*Notification).selectAndExecuteAction.func1({0x19a83f8?, 0xc0004792c0?}) /home/user/git/safing/portbase/notifications/notification.go:461 +0x2e github.com/safing/portbase/modules.(*Module).runWorker(0xe2d320?, {0x1831e27?, 0x4?}, 0xc00192bf18?) /home/user/git/safing/portbase/modules/worker.go:130 +0x93 github.com/safing/portbase/modules.(*Module).RunWorker(0xe646d7?, {0x1831e27?, 0xc0007a2000?}, 0xc00192bfb8?) /home/user/git/safing/portbase/modules/worker.go:52 +0x77 github.com/safing/portbase/modules.(*Module).StartWorker.func1() /home/user/git/safing/portbase/modules/worker.go:27 +0x4a created by github.com/safing/portbase/modules.(*Module).StartWorker /home/user/git/safing/portbase/modules/worker.go:26 +0xac ```
Unexpected Logs ``` 230413 22:29:22.367 pat/notify:170 > WARN 629 compat: detected secure dns bypass issue with C:\Users\LoganDark\AppData\Local\Keybase\Gui\Keybase.exe 230413 22:29:22.602 pat/notify:170 > WARN 631 compat: detected secure dns bypass issue with C:\Users\LoganDark\AppData\Local\Keybase\Gui\Keybase.exe 230413 22:30:52.370 pat/notify:170 > WARN 633 compat: detected secure dns bypass issue with C:\Users\LoganDark\AppData\Local\Keybase\Gui\Keybase.exe 230413 22:30:52.527 pat/notify:170 > WARN 635 compat: detected secure dns bypass issue with C:\Users\LoganDark\AppData\Local\Keybase\Gui\Keybase.exe 230413 22:30:54.400 pat/notify:170 > WARN 637 compat: detected secure dns bypass issue with C:\Users\LoganDark\AppData\Local\Keybase\Gui\Keybase.exe 230413 22:30:54.558 pat/notify:170 > WARN 639 compat: detected secure dns bypass issue with C:\Users\LoganDark\AppData\Local\Keybase\Gui\Keybase.exe 230413 22:31:34.136 pat/notify:170 > WARN 641 compat: detected secure dns bypass issue with C:\Users\LoganDark\AppData\Local\Keybase\Gui\Keybase.exe 230413 22:31:34.293 pat/notify:170 > WARN 643 compat: detected secure dns bypass issue with C:\Users\LoganDark\AppData\Local\Keybase\Gui\Keybase.exe 230413 22:31:36.170 pat/notify:170 > WARN 645 compat: detected secure dns bypass issue with C:\Users\LoganDark\AppData\Local\Keybase\Gui\Keybase.exe 230413 22:31:36.357 pat/notify:170 > WARN 647 compat: detected secure dns bypass issue with C:\Users\LoganDark\AppData\Local\Keybase\Gui\Keybase.exe 230413 22:33:52.815 CURRENT TIME ```
Goroutine Stack ``` goroutine profile: total 72 21 @ 0xe2d216 0xe3cd5c 0x11b5b46 0x11b6136 0xe5a1a1 # 0x11b5b45 github.com/safing/portbase/api.(*DatabaseAPI).processSub+0x225 /home/user/git/safing/portbase/api/database.go:419 # 0x11b6135 github.com/safing/portbase/api.(*DatabaseAPI).handleQsub+0xd5 /home/user/git/safing/portbase/api/database.go:482 4 @ 0xe2d216 0xe3cd5c 0x11b5b46 0x11b5772 0xe5a1a1 # 0x11b5b45 github.com/safing/portbase/api.(*DatabaseAPI).processSub+0x225 /home/user/git/safing/portbase/api/database.go:419 # 0x11b5771 github.com/safing/portbase/api.(*DatabaseAPI).handleSub+0x91 /home/user/git/safing/portbase/api/database.go:391 2 @ 0xe2d216 0xe232d7 0xe53ae9 0xe96f52 0xe98225 0xe990ab 0xf21549 0xf313e5 0x10d2731 0xf5653f 0xf5669d 0x10d3c78 0x10d8185 0xe5a1a1 # 0xe53ae8 internal/poll.runtime_pollWait+0x88 /usr/local/go/src/runtime/netpoll.go:305 # 0xe96f51 internal/poll.(*pollDesc).wait+0x31 /usr/local/go/src/internal/poll/fd_poll_runtime.go:84 # 0xe98224 internal/poll.execIO+0xe4 /usr/local/go/src/internal/poll/fd_windows.go:175 # 0xe990aa internal/poll.(*FD).Read+0x26a /usr/local/go/src/internal/poll/fd_windows.go:441 # 0xf21548 net.(*netFD).Read+0x28 /usr/local/go/src/net/fd_posix.go:55 # 0xf313e4 net.(*conn).Read+0x44 /usr/local/go/src/net/net.go:183 # 0x10d2730 net/http.(*connReader).Read+0x170 /usr/local/go/src/net/http/server.go:786 # 0xf5653e bufio.(*Reader).fill+0xfe /usr/local/go/src/bufio/bufio.go:106 # 0xf5669c bufio.(*Reader).Peek+0x5c /usr/local/go/src/bufio/bufio.go:144 # 0x10d3c77 net/http.(*conn).readRequest+0x1f7 /usr/local/go/src/net/http/server.go:991 # 0x10d8184 net/http.(*conn).serve+0x344 /usr/local/go/src/net/http/server.go:1916 2 @ 0xe2d216 0xe232d7 0xe53ae9 0xe96f52 0xe98225 0xe990ab 0xf21549 0xf313e5 0xf5653f 0xf5669d 0x11a384c 0x11a597b 0x11a69ac 0x11a6fb9 0x11b2ff5 0x11780d3 0x1177677 0x117746a 0xe5a1a1 # 0xe53ae8 internal/poll.runtime_pollWait+0x88 /usr/local/go/src/runtime/netpoll.go:305 # 0xe96f51 internal/poll.(*pollDesc).wait+0x31 /usr/local/go/src/internal/poll/fd_poll_runtime.go:84 # 0xe98224 internal/poll.execIO+0xe4 /usr/local/go/src/internal/poll/fd_windows.go:175 # 0xe990aa internal/poll.(*FD).Read+0x26a /usr/local/go/src/internal/poll/fd_windows.go:441 # 0xf21548 net.(*netFD).Read+0x28 /usr/local/go/src/net/fd_posix.go:55 # 0xf313e4 net.(*conn).Read+0x44 /usr/local/go/src/net/net.go:183 # 0xf5653e bufio.(*Reader).fill+0xfe /usr/local/go/src/bufio/bufio.go:106 # 0xf5669c bufio.(*Reader).Peek+0x5c /usr/local/go/src/bufio/bufio.go:144 # 0x11a384b github.com/gorilla/websocket.(*Conn).read+0x2b /home/user/go/pkg/mod/github.com/gorilla/websocket@v1.5.0/conn.go:371 # 0x11a597a github.com/gorilla/websocket.(*Conn).advanceFrame+0x7a /home/user/go/pkg/mod/github.com/gorilla/websocket@v1.5.0/conn.go:809 # 0x11a69ab github.com/gorilla/websocket.(*Conn).NextReader+0xcb /home/user/go/pkg/mod/github.com/gorilla/websocket@v1.5.0/conn.go:1009 # 0x11a6fb8 github.com/gorilla/websocket.(*Conn).ReadMessage+0x18 /home/user/go/pkg/mod/github.com/gorilla/websocket@v1.5.0/conn.go:1093 # 0x11b2ff4 github.com/safing/portbase/api.(*DatabaseAPI).handler+0x94 /home/user/git/safing/portbase/api/database.go:150 # 0x11780d2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x1177676 github.com/safing/portbase/modules.(*Module).RunWorker+0x76 /home/user/git/safing/portbase/modules/worker.go:52 # 0x1177469 github.com/safing/portbase/modules.(*Module).StartWorker.func1+0x49 /home/user/git/safing/portbase/modules/worker.go:27 2 @ 0xe2d216 0xe3cd5c 0x11689c5 0x11780d3 0x1177ab6 0xe5a1a1 # 0x11689c4 github.com/safing/portbase/database.(*Interface).DelayedCacheWriter+0x184 /home/user/git/safing/portbase/database/interface_cache.go:34 # 0x11780d2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x1177ab5 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 2 @ 0xe2d216 0xe3cd5c 0x11a03e6 0x11780d3 0x1177ab6 0xe5a1a1 # 0x11a03e5 github.com/safing/portbase/rng.(*Feeder).run+0x165 /home/user/git/safing/portbase/rng/entropy.go:117 # 0x11780d2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x1177ab5 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 2 @ 0xe2d216 0xe3cd5c 0x11b42ae 0x11780d3 0x1177677 0x117746a 0xe5a1a1 # 0x11b42ad github.com/safing/portbase/api.(*DatabaseAPI).writer+0x12d /home/user/git/safing/portbase/api/database.go:221 # 0x11780d2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x1177676 github.com/safing/portbase/modules.(*Module).RunWorker+0x76 /home/user/git/safing/portbase/modules/worker.go:52 # 0x1177469 github.com/safing/portbase/modules.(*Module).StartWorker.func1+0x49 /home/user/git/safing/portbase/modules/worker.go:27 1 @ 0xdf42ea 0xe56c29 0xe568b0 0xe724f4 0xe6c1ef 0xe6c1e2 0xe98ff1 0xea309e 0xea3096 0xf58ad6 0x11cc905 0xe5a1a1 # 0xe56c28 syscall.SyscallN+0x108 /usr/local/go/src/runtime/syscall_windows.go:557 # 0xe568af syscall.Syscall6+0x4f /usr/local/go/src/runtime/syscall_windows.go:501 # 0xe724f3 syscall.readFile+0x93 /usr/local/go/src/syscall/zsyscall_windows.go:1024 # 0xe6c1ee syscall.ReadFile+0x2e /usr/local/go/src/syscall/syscall_windows.go:400 # 0xe6c1e1 syscall.Read+0x21 /usr/local/go/src/syscall/syscall_windows.go:379 # 0xe98ff0 internal/poll.(*FD).Read+0x1b0 /usr/local/go/src/internal/poll/fd_windows.go:427 # 0xea309d os.(*File).read+0x5d /usr/local/go/src/os/file_posix.go:31 # 0xea3095 os.(*File).Read+0x55 /usr/local/go/src/os/file.go:118 # 0xf58ad5 bufio.(*Scanner).Scan+0x875 /usr/local/go/src/bufio/scan.go:214 # 0x11cc904 github.com/safing/portbase/run.inputSignals+0x84 /home/user/git/safing/portbase/run/main.go:126 1 @ 0xdf42ea 0xe56c29 0xe56938 0xf43173 0x1678b45 0x1678c0b 0x16760c5 0x167507f 0xe5a1a1 # 0xe56c28 syscall.SyscallN+0x108 /usr/local/go/src/runtime/syscall_windows.go:557 # 0xe56937 syscall.Syscall9+0x77 /usr/local/go/src/runtime/syscall_windows.go:507 # 0xf43172 golang.org/x/sys/windows.DeviceIoControl+0xd2 /home/user/go/pkg/mod/golang.org/x/sys@v0.7.0/windows/zsyscall_windows.go:1800 # 0x1678b44 github.com/safing/portmaster/firewall/interception/windowskext.deviceIOControlAsync+0xa4 /home/user/git/safing/portmaster/firewall/interception/windowskext/syscall.go:47 # 0x1678c0a github.com/safing/portmaster/firewall/interception/windowskext.deviceIOControl+0x2a /home/user/git/safing/portmaster/firewall/interception/windowskext/syscall.go:62 # 0x16760c4 github.com/safing/portmaster/firewall/interception/windowskext.RecvVerdictRequest+0x144 /home/user/git/safing/portmaster/firewall/interception/windowskext/kext.go:137 # 0x167507e github.com/safing/portmaster/firewall/interception/windowskext.Handler+0x7e /home/user/git/safing/portmaster/firewall/interception/windowskext/handler.go:84 1 @ 0xdfc43c 0xe5582f 0x11cc1b9 0xe5a1a1 # 0xe5582e os/signal.signal_recv+0x2e /usr/local/go/src/runtime/sigqueue.go:152 # 0x11cc1b8 os/signal.loop+0x18 /usr/local/go/src/os/signal/signal_unix.go:23 1 @ 0xe1fd76 0xe536e5 0x117fa95 0x117f8ad 0x117c84b 0x1189fa5 0x145b7b9 0x11b9223 0x11b8a69 0x11bdc33 0x11bc7e9 0x11780d3 0x1177677 0x11bc76d 0x10dc52c 0x10d8447 0xe5a1a1 # 0xe536e4 runtime/pprof.runtime_goroutineProfileWithLabels+0x24 /usr/local/go/src/runtime/mprof.go:846 # 0x117fa94 runtime/pprof.writeRuntimeProfile+0xb4 /usr/local/go/src/runtime/pprof/pprof.go:723 # 0x117f8ac runtime/pprof.writeGoroutine+0x4c /usr/local/go/src/runtime/pprof/pprof.go:683 # 0x117c84a runtime/pprof.(*Profile).WriteTo+0x14a /usr/local/go/src/runtime/pprof/pprof.go:330 # 0x1189fa4 github.com/safing/portbase/utils/debug.(*Info).AddGoroutineStack+0x64 /home/user/git/safing/portbase/utils/debug/debug.go:97 # 0x145b7b8 github.com/safing/portmaster/network.debugInfo+0x1d8 /home/user/git/safing/portmaster/network/api.go:86 # 0x11b9222 github.com/safing/portbase/api.(*Endpoint).ServeHTTP+0x742 /home/user/git/safing/portbase/api/endpoints.go:442 # 0x11b8a68 github.com/safing/portbase/api.(*endpointHandler).ServeHTTP+0x48 /home/user/git/safing/portbase/api/endpoints.go:358 # 0x11bdc32 github.com/safing/portbase/api.(*mainHandler).handle+0x1432 /home/user/git/safing/portbase/api/router.go:308 # 0x11bc7e8 github.com/safing/portbase/api.(*mainHandler).ServeHTTP.func1+0x28 /home/user/git/safing/portbase/api/router.go:110 # 0x11780d2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x1177676 github.com/safing/portbase/modules.(*Module).RunWorker+0x76 /home/user/git/safing/portbase/modules/worker.go:52 # 0x11bc76c github.com/safing/portbase/api.(*mainHandler).ServeHTTP+0x6c /home/user/git/safing/portbase/api/router.go:109 # 0x10dc52b net/http.serverHandler.ServeHTTP+0x30b /usr/local/go/src/net/http/server.go:2947 # 0x10d8446 net/http.(*conn).serve+0x606 /usr/local/go/src/net/http/server.go:1991 1 @ 0xe2d216 0xdf69bb 0xdf64b8 0x1432dfa 0x11780d3 0x1177ab6 0xe5a1a1 # 0x1432df9 github.com/safing/portmaster/resolver.listenToMDNS+0x619 /home/user/git/safing/portmaster/resolver/resolver-mdns.go:146 # 0x11780d2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x1177ab5 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 1 @ 0xe2d216 0xe232d7 0xe53ae9 0xe96f52 0xe98225 0xe990ab 0xf21549 0xf313e5 0x103b67d 0xef9bf8 0x103b865 0x1038cb6 0x103e90f 0x103e910 0xe912fa 0xf08428 0xf08429 0x11ce8c7 0x11ce687 0x1438256 0x11780d3 0x1177677 0x117746a 0xe5a1a1 # 0xe53ae8 internal/poll.runtime_pollWait+0x88 /usr/local/go/src/runtime/netpoll.go:305 # 0xe96f51 internal/poll.(*pollDesc).wait+0x31 /usr/local/go/src/internal/poll/fd_poll_runtime.go:84 # 0xe98224 internal/poll.execIO+0xe4 /usr/local/go/src/internal/poll/fd_windows.go:175 # 0xe990aa internal/poll.(*FD).Read+0x26a /usr/local/go/src/internal/poll/fd_windows.go:441 # 0xf21548 net.(*netFD).Read+0x28 /usr/local/go/src/net/fd_posix.go:55 # 0xf313e4 net.(*conn).Read+0x44 /usr/local/go/src/net/net.go:183 # 0x103b67c crypto/tls.(*atLeastReader).Read+0x3c /usr/local/go/src/crypto/tls/conn.go:787 # 0xef9bf7 bytes.(*Buffer).ReadFrom+0x97 /usr/local/go/src/bytes/buffer.go:202 # 0x103b864 crypto/tls.(*Conn).readFromUntil+0xe4 /usr/local/go/src/crypto/tls/conn.go:809 # 0x1038cb5 crypto/tls.(*Conn).readRecordOrCCS+0x115 /usr/local/go/src/crypto/tls/conn.go:616 # 0x103e90e crypto/tls.(*Conn).readRecord+0x16e /usr/local/go/src/crypto/tls/conn.go:582 # 0x103e90f crypto/tls.(*Conn).Read+0x16f /usr/local/go/src/crypto/tls/conn.go:1287 # 0xe912f9 io.ReadAtLeast+0x99 /usr/local/go/src/io/io.go:332 # 0xf08427 io.ReadFull+0xc7 /usr/local/go/src/io/io.go:351 # 0xf08428 encoding/binary.Read+0xc8 /usr/local/go/src/encoding/binary/binary.go:233 # 0x11ce8c6 github.com/miekg/dns.(*Conn).ReadMsgHeader+0x126 /home/user/go/pkg/mod/github.com/miekg/dns@v1.1.53/client.go:302 # 0x11ce686 github.com/miekg/dns.(*Conn).ReadMsg+0x26 /home/user/go/pkg/mod/github.com/miekg/dns@v1.1.53/client.go:264 # 0x1438255 github.com/safing/portmaster/resolver.(*tcpResolverConn).reader+0x75 /home/user/git/safing/portmaster/resolver/resolver-tcp.go:418 # 0x11780d2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x1177676 github.com/safing/portbase/modules.(*Module).RunWorker+0x76 /home/user/git/safing/portbase/modules/worker.go:52 # 0x1177469 github.com/safing/portbase/modules.(*Module).StartWorker.func1+0x49 /home/user/git/safing/portbase/modules/worker.go:27 1 @ 0xe2d216 0xe232d7 0xe53ae9 0xe96f52 0xe98225 0xe990ab 0xf21549 0xf313e5 0x10d225f 0xe5a1a1 # 0xe53ae8 internal/poll.runtime_pollWait+0x88 /usr/local/go/src/runtime/netpoll.go:305 # 0xe96f51 internal/poll.(*pollDesc).wait+0x31 /usr/local/go/src/internal/poll/fd_poll_runtime.go:84 # 0xe98224 internal/poll.execIO+0xe4 /usr/local/go/src/internal/poll/fd_windows.go:175 # 0xe990aa internal/poll.(*FD).Read+0x26a /usr/local/go/src/internal/poll/fd_windows.go:441 # 0xf21548 net.(*netFD).Read+0x28 /usr/local/go/src/net/fd_posix.go:55 # 0xf313e4 net.(*conn).Read+0x44 /usr/local/go/src/net/net.go:183 # 0x10d225e net/http.(*connReader).backgroundRead+0x3e /usr/local/go/src/net/http/server.go:678 1 @ 0xe2d216 0xe232d7 0xe53ae9 0xe96f52 0xe98225 0xe990ab 0xf21549 0xf313e5 0x10d2731 0xf5653f 0xf570cf 0xf57327 0x1071ef9 0x10cf3f9 0x10cf3fa 0x10d3cca 0x10d8185 0xe5a1a1 # 0xe53ae8 internal/poll.runtime_pollWait+0x88 /usr/local/go/src/runtime/netpoll.go:305 # 0xe96f51 internal/poll.(*pollDesc).wait+0x31 /usr/local/go/src/internal/poll/fd_poll_runtime.go:84 # 0xe98224 internal/poll.execIO+0xe4 /usr/local/go/src/internal/poll/fd_windows.go:175 # 0xe990aa internal/poll.(*FD).Read+0x26a /usr/local/go/src/internal/poll/fd_windows.go:441 # 0xf21548 net.(*netFD).Read+0x28 /usr/local/go/src/net/fd_posix.go:55 # 0xf313e4 net.(*conn).Read+0x44 /usr/local/go/src/net/net.go:183 # 0x10d2730 net/http.(*connReader).Read+0x170 /usr/local/go/src/net/http/server.go:786 # 0xf5653e bufio.(*Reader).fill+0xfe /usr/local/go/src/bufio/bufio.go:106 # 0xf570ce bufio.(*Reader).ReadSlice+0x2e /usr/local/go/src/bufio/bufio.go:372 # 0xf57326 bufio.(*Reader).ReadLine+0x26 /usr/local/go/src/bufio/bufio.go:401 # 0x1071ef8 net/textproto.(*Reader).readLineSlice+0x98 /usr/local/go/src/net/textproto/reader.go:56 # 0x10cf3f8 net/textproto.(*Reader).ReadLine+0x78 /usr/local/go/src/net/textproto/reader.go:37 # 0x10cf3f9 net/http.readRequest+0x79 /usr/local/go/src/net/http/request.go:1036 # 0x10d3cc9 net/http.(*conn).readRequest+0x249 /usr/local/go/src/net/http/server.go:994 # 0x10d8184 net/http.(*conn).serve+0x344 /usr/local/go/src/net/http/server.go:1916 1 @ 0xe2d216 0xe232d7 0xe53ae9 0xe96f52 0xe98225 0xe990ab 0xf21549 0xf313e5 0x1434cc5 0x1432f4e 0x11780d3 0x1177ab6 0xe5a1a1 # 0xe53ae8 internal/poll.runtime_pollWait+0x88 /usr/local/go/src/runtime/netpoll.go:305 # 0xe96f51 internal/poll.(*pollDesc).wait+0x31 /usr/local/go/src/internal/poll/fd_poll_runtime.go:84 # 0xe98224 internal/poll.execIO+0xe4 /usr/local/go/src/internal/poll/fd_windows.go:175 # 0xe990aa internal/poll.(*FD).Read+0x26a /usr/local/go/src/internal/poll/fd_windows.go:441 # 0xf21548 net.(*netFD).Read+0x28 /usr/local/go/src/net/fd_posix.go:55 # 0xf313e4 net.(*conn).Read+0x44 /usr/local/go/src/net/net.go:183 # 0x1434cc4 github.com/safing/portmaster/resolver.listenForDNSPackets+0x84 /home/user/git/safing/portmaster/resolver/resolver-mdns.go:342 # 0x1432f4d github.com/safing/portmaster/resolver.listenToMDNS.func7+0x2d /home/user/git/safing/portmaster/resolver/resolver-mdns.go:130 # 0x11780d2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x1177ab5 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 1 @ 0xe2d216 0xe232d7 0xe53ae9 0xe96f52 0xe98225 0xe990ab 0xf21549 0xf313e5 0x1434cc5 0x143300e 0x11780d3 0x1177ab6 0xe5a1a1 # 0xe53ae8 internal/poll.runtime_pollWait+0x88 /usr/local/go/src/runtime/netpoll.go:305 # 0xe96f51 internal/poll.(*pollDesc).wait+0x31 /usr/local/go/src/internal/poll/fd_poll_runtime.go:84 # 0xe98224 internal/poll.execIO+0xe4 /usr/local/go/src/internal/poll/fd_windows.go:175 # 0xe990aa internal/poll.(*FD).Read+0x26a /usr/local/go/src/internal/poll/fd_windows.go:441 # 0xf21548 net.(*netFD).Read+0x28 /usr/local/go/src/net/fd_posix.go:55 # 0xf313e4 net.(*conn).Read+0x44 /usr/local/go/src/net/net.go:183 # 0x1434cc4 github.com/safing/portmaster/resolver.listenForDNSPackets+0x84 /home/user/git/safing/portmaster/resolver/resolver-mdns.go:342 # 0x143300d github.com/safing/portmaster/resolver.listenToMDNS.func3+0x2d /home/user/git/safing/portmaster/resolver/resolver-mdns.go:103 # 0x11780d2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x1177ab5 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 1 @ 0xe2d216 0xe232d7 0xe53ae9 0xe96f52 0xe98225 0xe990ab 0xf21549 0xf313e5 0x1434cc5 0x143306e 0x11780d3 0x1177ab6 0xe5a1a1 # 0xe53ae8 internal/poll.runtime_pollWait+0x88 /usr/local/go/src/runtime/netpoll.go:305 # 0xe96f51 internal/poll.(*pollDesc).wait+0x31 /usr/local/go/src/internal/poll/fd_poll_runtime.go:84 # 0xe98224 internal/poll.execIO+0xe4 /usr/local/go/src/internal/poll/fd_windows.go:175 # 0xe990aa internal/poll.(*FD).Read+0x26a /usr/local/go/src/internal/poll/fd_windows.go:441 # 0xf21548 net.(*netFD).Read+0x28 /usr/local/go/src/net/fd_posix.go:55 # 0xf313e4 net.(*conn).Read+0x44 /usr/local/go/src/net/net.go:183 # 0x1434cc4 github.com/safing/portmaster/resolver.listenForDNSPackets+0x84 /home/user/git/safing/portmaster/resolver/resolver-mdns.go:342 # 0x143306d github.com/safing/portmaster/resolver.listenToMDNS.func1+0x2d /home/user/git/safing/portmaster/resolver/resolver-mdns.go:90 # 0x11780d2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x1177ab5 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 1 @ 0xe2d216 0xe232d7 0xe53ae9 0xe96f52 0xe98225 0xe9a7b0 0xf21889 0xf3a945 0xf38c91 0xf38e50 0x120e165 0x11fccf0 0x11fa359 0x11fb9e9 0x11faa9b 0x168c1cb 0x11780d3 0x1177ab6 0xe5a1a1 # 0xe53ae8 internal/poll.runtime_pollWait+0x88 /usr/local/go/src/runtime/netpoll.go:305 # 0xe96f51 internal/poll.(*pollDesc).wait+0x31 /usr/local/go/src/internal/poll/fd_poll_runtime.go:84 # 0xe98224 internal/poll.execIO+0xe4 /usr/local/go/src/internal/poll/fd_windows.go:175 # 0xe9a7af internal/poll.(*FD).ReadFromInet6+0x14f /usr/local/go/src/internal/poll/fd_windows.go:639 # 0xf21888 net.(*netFD).readFromInet6+0x28 /usr/local/go/src/net/fd_posix.go:72 # 0xf3a944 net.(*UDPConn).readFrom+0x84 /usr/local/go/src/net/udpsock_posix.go:59 # 0xf38c90 net.(*UDPConn).readFromUDP+0x30 /usr/local/go/src/net/udpsock.go:149 # 0xf38e4f net.(*UDPConn).ReadFrom+0x4f /usr/local/go/src/net/udpsock.go:158 # 0x120e164 github.com/miekg/dns.ReadFromSessionUDP+0x24 /home/user/go/pkg/mod/github.com/miekg/dns@v1.1.53/udp_windows.go:22 # 0x11fccef github.com/miekg/dns.(*Server).readUDP+0x10f /home/user/go/pkg/mod/github.com/miekg/dns@v1.1.53/server.go:695 # 0x11fa358 github.com/miekg/dns.defaultReader.ReadUDP+0x18 /home/user/go/pkg/mod/github.com/miekg/dns@v1.1.53/server.go:174 # 0x11fb9e8 github.com/miekg/dns.(*Server).serveUDP+0x2a8 /home/user/go/pkg/mod/github.com/miekg/dns@v1.1.53/server.go:513 # 0x11faa9a github.com/miekg/dns.(*Server).ListenAndServe+0x49a /home/user/go/pkg/mod/github.com/miekg/dns@v1.1.53/server.go:342 # 0x168c1ca github.com/safing/portmaster/nameserver.startListener.func1+0x24a /home/user/git/safing/portmaster/nameserver/module.go:147 # 0x11780d2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x1177ab5 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 1 @ 0xe2d216 0xe232d7 0xe53ae9 0xe96f52 0xe98225 0xe9d00d 0xe9d376 0xf23265 0xf381e8 0xf3705d 0x10dca85 0x10dc6bd 0x11bc585 0x11780d3 0x1177677 0x11bc685 0x11780d3 0x1177ab6 0xe5a1a1 # 0xe53ae8 internal/poll.runtime_pollWait+0x88 /usr/local/go/src/runtime/netpoll.go:305 # 0xe96f51 internal/poll.(*pollDesc).wait+0x31 /usr/local/go/src/internal/poll/fd_poll_runtime.go:84 # 0xe98224 internal/poll.execIO+0xe4 /usr/local/go/src/internal/poll/fd_windows.go:175 # 0xe9d00c internal/poll.(*FD).acceptOne+0x6c /usr/local/go/src/internal/poll/fd_windows.go:942 # 0xe9d375 internal/poll.(*FD).Accept+0x1d5 /usr/local/go/src/internal/poll/fd_windows.go:976 # 0xf23264 net.(*netFD).accept+0x64 /usr/local/go/src/net/fd_windows.go:139 # 0xf381e7 net.(*TCPListener).accept+0x27 /usr/local/go/src/net/tcpsock_posix.go:142 # 0xf3705c net.(*TCPListener).Accept+0x3c /usr/local/go/src/net/tcpsock.go:288 # 0x10dca84 net/http.(*Server).Serve+0x384 /usr/local/go/src/net/http/server.go:3070 # 0x10dc6bc net/http.(*Server).ListenAndServe+0x7c /usr/local/go/src/net/http/server.go:2999 # 0x11bc584 github.com/safing/portbase/api.serverManager.func1+0x24 /home/user/git/safing/portbase/api/router.go:92 # 0x11780d2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x1177676 github.com/safing/portbase/modules.(*Module).RunWorker+0x76 /home/user/git/safing/portbase/modules/worker.go:52 # 0x11bc684 github.com/safing/portbase/api.serverManager+0xe4 /home/user/git/safing/portbase/api/router.go:91 # 0x11780d2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x1177ab5 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 1 @ 0xe2d216 0xe3cd5c 0x116f966 0xe5a1a1 # 0x116f965 github.com/safing/portbase/modules.microTaskScheduler+0x2a5 /home/user/git/safing/portbase/modules/microtasks.go:292 1 @ 0xe2d216 0xe3cd5c 0x1176ea5 0xe5a1a1 # 0x1176ea4 github.com/safing/portbase/modules.taskQueueHandler+0x84 /home/user/git/safing/portbase/modules/tasks.go:468 1 @ 0xe2d216 0xe3cd5c 0x11771b8 0xe5a1a1 # 0x11771b7 github.com/safing/portbase/modules.taskScheduleHandler+0xb7 /home/user/git/safing/portbase/modules/tasks.go:518 1 @ 0xe2d216 0xe3cd5c 0x11a07ce 0x11780d3 0x1177ab6 0xe5a1a1 # 0x11a07cd github.com/safing/portbase/rng.fullFeeder+0x8d /home/user/git/safing/portbase/rng/fullfeed.go:24 # 0x11780d2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x1177ab5 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 1 @ 0xe2d216 0xe3cd5c 0x11a1205 0x11780d3 0x1177ab6 0xe5a1a1 # 0x11a1204 github.com/safing/portbase/rng.osFeeder+0x184 /home/user/git/safing/portbase/rng/osfeeder.go:26 # 0x11780d2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x1177ab5 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 1 @ 0xe2d216 0xe3cd5c 0x11a1b65 0x11780d3 0x1177ab6 0xe5a1a1 # 0x11a1b64 github.com/safing/portbase/rng.tickFeeder+0x244 /home/user/git/safing/portbase/rng/tickfeeder.go:58 # 0x11780d2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x1177ab5 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 1 @ 0xe2d216 0xe3cd5c 0x11cc5fe 0x16915b9 0xe2ce7e 0xe5a1a1 # 0x11cc5fd github.com/safing/portbase/run.Run+0x27d /home/user/git/safing/portbase/run/main.go:76 # 0x16915b8 main.main+0xf8 /home/user/git/safing/portmaster/cmds/portmaster-core/main.go:36 # 0xe2ce7d runtime.main+0x1fd /usr/local/go/src/runtime/proc.go:250 1 @ 0xe2d216 0xe3cd5c 0x12fa985 0x11780d3 0x1177ab6 0xe5a1a1 # 0x12fa984 github.com/safing/portbase/notifications.cleaner+0xe4 /home/user/git/safing/portbase/notifications/cleaner.go:13 # 0x11780d2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x1177ab5 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 1 @ 0xe2d216 0xe3cd5c 0x131df5d 0x11780d3 0x1177ab6 0xe5a1a1 # 0x131df5c github.com/safing/portmaster/intel/geoip.(*updateWorker).run+0x17c /home/user/git/safing/portmaster/intel/geoip/database.go:173 # 0x11780d2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x1177ab5 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 1 @ 0xe2d216 0xe3cd5c 0x132593e 0x11780d3 0x1177ab6 0xe5a1a1 # 0x132593d github.com/safing/portmaster/netenv.monitorNetworkChanges+0x11d /home/user/git/safing/portmaster/netenv/network-change.go:49 # 0x11780d2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x1177ab5 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 1 @ 0xe2d216 0xe3cd5c 0x1326c86 0x11780d3 0x1177ab6 0xe5a1a1 # 0x1326c85 github.com/safing/portmaster/netenv.monitorOnlineStatus+0xe5 /home/user/git/safing/portmaster/netenv/online-status.go:357 # 0x11780d2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x1177ab5 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 1 @ 0xe2d216 0xe3cd5c 0x1330305 0x11780d3 0x1177677 0x117746a 0xe5a1a1 # 0x1330304 github.com/safing/portmaster/status.autoPilot+0x84 /home/user/git/safing/portmaster/status/autopilot.go:16 # 0x11780d2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x1177676 github.com/safing/portbase/modules.(*Module).RunWorker+0x76 /home/user/git/safing/portbase/modules/worker.go:52 # 0x1177469 github.com/safing/portbase/modules.(*Module).StartWorker.func1+0x49 /home/user/git/safing/portbase/modules/worker.go:27 1 @ 0xe2d216 0xe3cd5c 0x141144b 0x11780d3 0x1177ab6 0xe5a1a1 # 0x141144a github.com/safing/portmaster/profile.cleanActiveProfiles+0xaa /home/user/git/safing/portmaster/profile/active.go:58 # 0x11780d2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x1177ab5 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 1 @ 0xe2d216 0xe3cd5c 0x141636e 0x11780d3 0x1177ab6 0xe5a1a1 # 0x141636d github.com/safing/portmaster/profile.startProfileUpdateChecker.func1+0x1ed /home/user/git/safing/portmaster/profile/database.go:54 # 0x11780d2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x1177ab5 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 1 @ 0xe2d216 0xe3cd5c 0x1433166 0x1432ee7 0x11780d3 0x1177ab6 0xe5a1a1 # 0x1433165 github.com/safing/portmaster/resolver.handleMDNSMessages+0xc5 /home/user/git/safing/portmaster/resolver/resolver-mdns.go:152 # 0x1432ee6 github.com/safing/portmaster/resolver.listenToMDNS.func9+0x26 /home/user/git/safing/portmaster/resolver/resolver-mdns.go:142 # 0x11780d2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x1177ab5 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 1 @ 0xe2d216 0xe3cd5c 0x1437a65 0x11780d3 0x1177677 0x117746a 0xe5a1a1 # 0x1437a64 github.com/safing/portmaster/resolver.(*tcpResolverConn).handler+0x224 /home/user/git/safing/portmaster/resolver/resolver-tcp.go:294 # 0x11780d2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x1177676 github.com/safing/portbase/modules.(*Module).RunWorker+0x76 /home/user/git/safing/portbase/modules/worker.go:52 # 0x1177469 github.com/safing/portbase/modules.(*Module).StartWorker.func1+0x49 /home/user/git/safing/portbase/modules/worker.go:27 1 @ 0xe2d216 0xe3cd5c 0x145d725 0x11780d3 0x1177ab6 0xe5a1a1 # 0x145d724 github.com/safing/portmaster/network.connectionCleaner+0xa4 /home/user/git/safing/portmaster/network/clean.go:25 # 0x11780d2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x1177ab5 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 1 @ 0xe2d216 0xe3cd5c 0x1462ae6 0x11780d3 0x1177ab6 0xe5a1a1 # 0x1462ae5 github.com/safing/portmaster/network.openDNSRequestWriter+0xe5 /home/user/git/safing/portmaster/network/dns.go:91 # 0x11780d2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x1177ab5 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 1 @ 0xe2d216 0xe3cd5c 0x166422e 0x1666458 0x11780d3 0x1177ab6 0xe5a1a1 # 0x166422d github.com/safing/portmaster/netquery.(*Manager).HandleFeed+0xcd /home/user/git/safing/portmaster/netquery/manager.go:82 # 0x1666457 github.com/safing/portmaster/netquery.(*module).start.func2+0x37 /home/user/git/safing/portmaster/netquery/module_api.go:131 # 0x11780d2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x1177ab5 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 1 @ 0xe2d216 0xe3cd5c 0x166629a 0x11780d3 0x1177ab6 0xe5a1a1 # 0x1666299 github.com/safing/portmaster/netquery.(*module).start.func3+0xb9 /home/user/git/safing/portmaster/netquery/module_api.go:137 # 0x11780d2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x1177ab5 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 1 @ 0xe2d216 0xe3cd5c 0x16666eb 0x11780d3 0x1177ab6 0xe5a1a1 # 0x16666ea github.com/safing/portmaster/netquery.(*module).start.func1+0x24a /home/user/git/safing/portmaster/netquery/module_api.go:110 # 0x11780d2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x1177ab5 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x135 /home/user/git/safing/portbase/modules/worker.go:83 1 @ 0xe2d216 0xe3cd5c 0x168390d 0x11780d3 0x1177677 0x117746a 0xe5a1a1 # 0x168390c github.com/safing/portmaster/firewall.packetHandler+0xac /home/user/git/safing/portmaster/firewall/interception.go:688 # 0x11780d2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x1177676 github.com/safing/portbase/modules.(*Module).RunWorker+0x76 /home/user/git/safing/portbase/modules/worker.go:52 # 0x1177469 github.com/safing/portbase/modules.(*Module).StartWorker.func1+0x49 /home/user/git/safing/portbase/modules/worker.go:27 1 @ 0xe2d216 0xe3cd5c 0x1683bc6 0x11780d3 0x1177677 0x117746a 0xe5a1a1 # 0x1683bc5 github.com/safing/portmaster/firewall.statLogger+0x1c5 /home/user/git/safing/portmaster/firewall/interception.go:702 # 0x11780d2 github.com/safing/portbase/modules.(*Module).runWorker+0x92 /home/user/git/safing/portbase/modules/worker.go:130 # 0x1177676 github.com/safing/portbase/modules.(*Module).RunWorker+0x76 /home/user/git/safing/portbase/modules/worker.go:52 # 0x1177469 github.com/safing/portbase/modules.(*Module).StartWorker.func1+0x49 /home/user/git/safing/portbase/modules/worker.go:27 1 @ 0xe2d216 0xe3cd5c 0xf9dd86 0xf9dbea 0xe5a1a1 # 0xf9dd85 github.com/safing/portbase/log.writer+0xe5 /home/user/git/safing/portbase/log/output.go:154 # 0xf9dbe9 github.com/safing/portbase/log.writerManager+0x89 /home/user/git/safing/portbase/log/output.go:113 ```

funny how there is no connection to www.google.com anywhere near the time I actually tried to open that page, and it's still loading because Portmaster seems to have completely failed to pick it up. Also, there's nothing in prompts.

There's something very wrong here apparently

LoganDark commented 1 year ago

This is still happening very frequently to us on the latest version of Portmaster. We have no insight into the issue and no idea why this is happening, but we constantly have to retry requests 3–4 times or wait up to 10 seconds in some cases for things as simple as:

These requests are usually picked up by the Portmaster core after a few seconds, but in extreme cases (see our reply right above) Portmaster can somehow forget to allow a connection to open, despite there being rules that permit it & it never generating a prompt, or even an entry in Portmaster's network log (which should happen even for connections that are prompting).

I wonder if this is some sort of bottleneck in Windows or just something with Portmaster, but in either case it's extremely frustrating and hindering. Do you have any statements about how this is prioritized internally or what we can do to help you resolve the issue?

-Emily

LoganDark commented 1 year ago

Is there any profiling or tracing I can do on my system in order to figure out what is the cause of this issue? I can do system-wide ETW traces or take the system into a kernel debugger or something. Is there absolutely anything that would help?

working-name commented 1 year ago

This behavior is ongoing in beta 1.0.12 as well. For example I keep getting DNS_PROBE_POSSIBLE for Brave which I've set to allow by default. This makes my web browsing experience feel like I'm on dialup in the 90s.

LoganDark commented 1 year ago

Maybe v1.0.13 looks to have something that could possibly help ("Suggest using stale DNS cache when queries are slow") but switching to the staging branch and repeatedly restarting and checking for updates does not find this version or expose this setting (even if I set the feature level to "Experimental") so I can't do any testing with this even though it was supposedly released 11 hours ago.

Hariok-Q commented 1 year ago

Has this been fixed? Is this why it's slow to solve DNS requests on my PC?

LoganDark commented 1 year ago

Has this been fixed? Is this why it's slow to solve DNS requests on my PC?

This has not been fixed. The recently added setting only allows connections to be identified by IP before a domain name has been resolved, which leads to false connection prompts

Raphty commented 1 year ago

there is a new dns cashing option, Portmaster does prompt you to enable this setting if it detects slow dns speeds

LoganDark commented 1 year ago

there is a new dns cashing option, Portmaster does prompt you to enable this setting if it detects slow dns speeds

that is what I was just talking about, and is the setting that does not fix this issue. connections are still just as slow, because it is not caused by slow DNS

Hariok-Q commented 1 year ago

there is a new dns cashing option, Portmaster does prompt you to enable this setting if it detects slow dns speeds

I didn't notice any differences when enabling that option. I'm not sure how caching works, but wouldn't that speed up only websites that I already visited before and that therefore are cached? (I don't notice any difference even in that case though)

Raphty commented 1 year ago

I don't think that this is a bug with Portmaster, it might be some compatibility thing then - this is always hard to tell

BennettFourr commented 1 year ago

This seems to effect me even on a completely blank windows install.

ijspzpt commented 1 year ago

You can easily test this by doing an nslookup from a client machine. With portmaster enabled, dns queries are consistently slow every time. Disable portmaster and responses are immediate with no lag whatsoever. This happens on all machines I have portmaster on, and like Bennett mentioned, also happens on brand new fresh Windows installs.

working-name commented 1 year ago

I don't think that this is a bug with Portmaster, it might be some compatibility thing then - this is always hard to tell

Have you tried testing it out in a simple VM? It happens on a fresh windows 10 or 11 install for me. It's very slow no matter what DNS config I give portmaster, including leave it blank to fallback to system DNS setting.

Even if I run portmaster with filtering disabled it still slows down all network requests. Sometimes my browser will hang for a long time and I have to blast it with refresh requests or open 8-15 tabs and paste the same URL in each before it finally resolves the domain and starts loading the content. Quite a terrible experience.

LoganDark commented 1 year ago

Sometimes my browser will hang for a long time and I have to blast it with refresh requests or open 8-15 tabs and paste the same URL in each before it finally resolves the domain and starts loading the content. Quite a terrible experience.

Absolutely, I hate this. I've gotten into the habit of always copying my web searches to the clipboard before I try to load them, so that I can paste it into a bunch more tabs if Portmaster decides it doesn't want to let that tab load. It's insane and probably counts as OCD at this point.

lkraider commented 1 year ago

It consistently hangs on DNS resolution for me, testing in a loop:

while($val -ne 99)
{
$val++
(Measure-Command {Resolve-DnsName -Name www.google.co.uk -Server 1.1.1.1 -DnsOnly -NoHostsFile -Type A_AAAA}).TotalMilliseconds
}

Output:

83.6725
8.6989
14.6753
15.0204
14.4081
14.8532
14.6529
14.6084
14.9404
15.1601
14.9396
14.7747
14.4951
14.8335
14.3526
15.1252
14.9692
14.4629
14.6714
15.032
14.5034
14.7772
14.916
14.7585
14.6859
14.9887
15.0781
14.5636
14.9179
14.8247
12030.3671
81.3203
11.3967
14.897
14.792
15.0538
14.9636
14.889
14.975
15.43
15.078
15.1323
14.1221
14.4624
15.2542
12037.7361
71.3154
20.9707
15.093
14.5692
14.2499
15.1195
14.4399
14.9111
14.8097
15.1166
14.9051
14.3898
14.7166
14.8145
12049.5441
73.2265
18.6538
14.2874
15.2786
14.3787
14.9612
12060.2519
74.7417
18.1699
14.5706
14.8683
14.4668
14.7295
14.2383
14.9864
12050.3625
74.2015
18.4688
14.8863
14.7699
14.4545
14.7805
14.6655
14.7606
14.5938
14.3294
15.0409
14.9751
15.1185
15.5386
14.4999
14.6126
14.5667
14.6811
12047.0915
3101.1452
14.1336
12043.2231

Host is a windows 10 desktop on cable connection. For comparison, running the same loop in a macos on wifi at the same time has no timeouts.

lkraider commented 1 year ago

Here is the output with Portmaster completely disabled:

output ``` 251.3057 20.1401 21.6162 19.2089 21.9173 21.3355 21.7313 21.8757 18.9996 20.4133 12.8477 20.6237 16.5 22.0348 21.4941 16.0794 21.2437 22.1492 18.3547 20.5878 22.6082 21.7058 21.5555 22.2549 21.6215 21.8246 18.4009 22.1709 19.7226 21.1024 22.1847 21.8457 22.1642 21.1233 22.1057 21.701 21.7682 21.0143 18.8751 21.776 15.391 24.4059 19.4437 21.8098 21.5741 15.7413 22.3641 19.5649 21.3167 15.5131 22.4413 18.2216 21.5338 22.1526 21.6926 22.1157 17.5619 21.5543 18.3927 22.16 18.4165 21.873 21.5074 22.4273 16.1386 20.6218 22.0039 21.3756 21.4257 22.6561 22.1414 24.724 21.5186 18.6188 21.4703 21.2848 22.7808 22.29 27.5649 24.4353 25.292 24.5969 21.5465 22.8161 21.3418 23.309 24.2527 20.9777 22.139 21.9071 22.9598 26.4347 18.6595 21.8421 24.4809 21.9387 21.7438 21.5831 21.8401 ```
Andell4301 commented 1 year ago

I seem to be experiencing this too. I love the Portmaster software and its mission, but I simply, and regretfully, cannot use it with this bug around.

I have attempted three completely fresh installs of Portmaster now, and all three times it had this issue.

Without Portmaster, DNS requests take within 100 ms. From the moment I turn on Portmaster, my DNS requests are slowed down dramatically. Every request, no matter what, takes at least 700ms. Sometimes (relatively frequently) they won't resolve at all and will simply time out after hanging for several seconds (up to 10). Again, this happens pretty frequently. But even when they don't outright fail, all of my requests jump from sub-100 ms to 700+ ms.

This happens with completely clean installs, but I have also tried changing settings too. I've tried several different DNS settings, including removing them so it uses the system resolver. I've turned on caching, but there was no difference whatsoever. I'm not using a VPN, and I'm not using the SPN, but I also tried following all of the compatibility guides on the wiki, just in case; alas, none of them made any difference.

I've tried tweaking several other settings, turning off filters, everything I could think of. But nothing made any difference.

Once I turn off Portmaster however, my DNS requests immediately go back to normal and resolve at normal speed. If I turn Portmaster back on, they're back to slow again. And if I turn it off, they once again return to normal.

I really, really want to use Portmaster. But I cannot do it when not only is my basic computer usage dramatically slowed down, but my requests consistently fail. It is impossible to have an even passable experience doing something as simple as browsing the web when web pages consistently fail to load.

I truly hope the cause of this issue can be identified and resolved.

LoganDark commented 1 year ago

I highly doubt this is a "community helps community" situation because this seems to be an issue with portmaster that unconditionally degrades network performance in all cases which should make it a pretty severe, high priority issue

lkraider commented 1 year ago

@Raphty any way for us to debug the delay? Maybe there are some logs or debug option on the app to figure out the resolution timeouts?

dhaavi commented 1 year ago

Delays are most likely coming from the process detection. We are currently working on an improvement there and I would wait for that before diving deeper into this issue.

LoganDark commented 1 year ago

We are currently working on an improvement there and I would wait for that before diving deeper into this issue.

This has been the case multiple times throughout the evolution of this problem, what makes this time different?

zsmith009 commented 1 year ago

I'm writing this comment to let people know this has been an issue for me for the entire 8 months I've had Portmaster installed as well. Same as described in this thread, on Windows 10. I finally decided to either get the issue fixed, or find an alternative to Portmaster.

I'll be honest, I'm a little disappointed by the guy saying this does not seem to be an issue with Portmaster. Otherwise, Portmaster was great, but this is a dealbreaker.

BennettFourr commented 1 year ago

I switched to pihole a few months ago because of this

dhaavi commented 1 year ago

This has been the case multiple times throughout the evolution of this problem, what makes this time different?

Not sure what we were working on the last times, but with v1.2 (currently in beta as v1.3), we improved the integration with the system to improve attributing connections. This means that the 5-50ms that were needed to attribute the connection are now pretty much gone.

(If you are on linux, update to v1.3, then wait 10 seconds, then reboot, and then check the debug info to see if there are any errors. If you have your own systemd unit file, you might need to update that yourself to allow eBPF usage.)

If this issue continues after v1.3 I will take another close look into this.

dhaavi commented 1 year ago

Also, in most cases this will probably be DNS. So please check your configured DNS server in Portmaster, or try remove all DNS servers from the config and fallback to the system DNS to test if that is slow for you.

Andell4301 commented 1 year ago

I tried v1.3 of Portmaster on Windows with system default DNS. There is some degree of general slowdown by just enabling Portmaster, but I think it is at an acceptable level.

What is not acceptable however, and what got me to reluctantly uninstall Portmaster once again as I wait for a future fix, is that all of the other issues I had before still remain.

Issue 1

The first issue is that whenever I start my PC, it seems like connections will just refuse to go through for a minute or more.

If I try to go to websites in the browser, either the browser will just pretend like I didn't enter anything, or it will say DNS lookup failed. It will do this for every request for about a minute or two before requests can even begin to go through.

I'd like to reiterate that:

This issue seems related to what Working-Name and LoganDark experienced from earlier in this thread.

Issue 2

The second issue is the same one that lkraider posted about earlier in this thread.

When I have Portmaster enabled, requests will VERY FREQUENTLY simply hang for an excruciatingly long time. As you can see in lkraider's post, his requests frequently take 12000+ ms to resolve. This is the same behavior I am experiencing. If I run the exact same command lkraider did, I'll see it full of requests that take several thousand—often over 10,000—ms to resolve. Sometimes they will take so long that the command says the connection simply timed out. It wont be every request, just like lkraider, but it will be several of them.

Closing Note

I would once again like to clarify that these issues have been going on for me for several versions. Each time I attempt to install Portmaster, and each time these issues make me uninstall. They continue to be issues on v1.3.

dhaavi commented 1 year ago

Hey @Andell4301, thanks for the thorough report and summary of issues.

I will try to reproduce this in the coming weeks and will report back with my findings.

LoganDark commented 1 year ago

Issue 2

The second issue is the same one that lkraider posted about earlier in this thread.

And me too, FWIW. I even have a video of Google Search completely refusing to load until Portmaster is restarted in order to allow the connection through. This happens all the time regardless of how recently I started my computer, browser, or Portmaster.

image

dhaavi commented 1 year ago

One thing that would be very interesting to know, is if disabling the Seamless DNS Integration setting changes anything.

You'll need to dig out this setting and you should not use it in production, as it makes Portmaster partly blind and renders a lot of features useless. But as this disables mangling of DNS records, it could point us in the right direction to debug this.

So, if anyone who is experiencing this and can try and report back, that'd be super helpful! Thanks!

LoganDark commented 1 year ago

One thing that would be very interesting to know, is if disabling the Seamless DNS Integration setting changes anything.

image

while scrolling down to find that setting, I saw this and actually I think I'm done troubleshooting portmaster for today (mistake? or time to update your marketing that claims the subscription is only to cover SPN costs?)

dhaavi commented 1 year ago

There is a change coming here, yes. We've talked about it in the last two live streams and the pricing page is already updated: https://safing.io/pricing/ There will be a more extensive blog post next week going into the details.

(Marking the last and this comment as off-topic to stay focused here. If there are any questions, please ask on discord.)

working-name commented 1 year ago

I think it's a huge mistake to charge for a faulty, unfinished product - SPN or not. You will have successfully shot yourself in the foot by asking for money for something you cannot deliver for 1+ years.

Handle the bugs, make it do what is advertised, then charge. And when you do, maybe don't pull a Teamviewer, LogMeIn, Dropbox, 1Password, or whatever other bait&switch and put previously available features behind a paywall. Nothing screams untrustworthy more, and unfortunately for you, you're in the business of security/privacy.

LoganDark commented 1 year ago

I think it's a huge mistake to charge for a faulty, unfinished product - SPN or not. You will have successfully shot yourself in the foot by asking for money for something you cannot deliver for 1+ years.

Handle the bugs, make it do what is advertised, then charge. And when you do, maybe don't pull a Teamviewer, LogMeIn, Dropbox, 1Password, or whatever other bait&switch and put previously available features behind a paywall. Nothing screams untrustworthy more, and unfortunately for you, you're in the business of security/privacy.

SPN isn't faulty and a SaaS is never finished. But suddenly beginning to restrict which local, on-machine analysis I am allowed to perform based on a subscription that used to represent only access to paid servers, not access to paywalled features on my own computer is definitely a change that will take some getting used to. Especially since Portmaster even used to keep track of long-term logs, but then they nerfed it (to be fair, it was causing a performance problem back then).

That history analysis feature on its own, FWIW, is completely new, so they're not locking down existing features at all. Just gating new ones.

working-name commented 1 year ago

No, Portmaster is faulty on windows. I never tried SPN, because it has no value proposition for me.

Portmaster hasn't worked normally on Windows ever since I first tried it 1+ years ago. And the direction is backwards (UI has become more cumbersome, not more user friendly), with lots of pushback from the devs - oh, it's Windows' fault for this and that. Oh, it's your fault because you cleared your DNS entries... anything but the actual software.

To be fair, though, "connection history" sounds like what PM has done all along, I didn't get the distinction of on-machine analysis.

For example, where's the "live view" for connections? You have to hit refresh every time you want to see the new connections being made by an app.

LoganDark commented 1 year ago

No, Portmaster is faulty on windows. I never tried SPN, because it has no value proposition for me.

Portmaster hasn't worked normally on Windows ever since I first tried it 1+ years ago. And the direction is backwards (UI has become more cumbersome, not more user friendly), with lots of pushback from the devs - oh, it's Windows' fault for this and that. Oh, it's your fault because you cleared your DNS entries... anything but the actual software.

To be fair, though, "connection history" sounds like what PM has done all along, I didn't get the distinction of on-machine analysis.

For example, where's the "live view" for connections? You have to hit refresh every time you want to see the new connections being made by an app.

Portmaster is currently the most technically advanced firewall available for Windows. Say what you will about the user interface and feature set, but unless you want something that MitMs encrypted connections, nothing else out there has per-process, per-domain, per-port, per-protocol control over your entire computer, including all privileged operating system processes. Not to mention the ability to give you live prompts to allow selected first-time connections to succeed—I've seen live prompts implemented in other ways before, but Portmaster (similarly to Little Snitch for macOS, which is where I came from) is the only firewall that can prompt me about a connection without actually blocking it first.

(FWIW, I also have never paid for Portmaster and have never used the SPN.)