safing / portmaster

🏔 Love Freedom - ❌ Block Mass Surveillance
https://safing.io
GNU General Public License v3.0
9.16k stars 288 forks source link

Rules not consistent #446

Closed racrbmr closed 2 years ago

racrbmr commented 2 years ago

What happened: Sub-domain not blocked after opening Main domain.

Example: I use rules to block sub-domain in App Settings with target "my.vultr.com". At first I try it worked as intended, but when I open vultr.com it load the page as intended then I go to my.vultr.com it did not block the domain and proceed to load the page.

What did you expect to happen?: Sub-domain is blocked while top domain is allowed.

How did you reproduce it?: I have tried to re-do again in Private tab, but its the same.

Debug Information:

Version 0.7.6 ``` Portmaster version 0.7.6 commit tags/v0.7.6-0-g6b85fe1501bf32cbc5eb6353f427acc28e40e59f built with go1.15.8 (gc) windows/amd64 using options main.go by user@docker on 19.10.2021 Licensed under the AGPLv3 license. The source code is available here: https://github.com/safing/portmaster ```
Platform: Microsoft Windows 10 Home Single Language 10.0.19043 Build 19043 ``` System: Microsoft Windows 10 Home Single Language windows (Standalone Workstation) 10.0.19043 Build 19043 Kernel: 10.0.19043 Build 19043 x86_64 ```
Status: Trusted ``` ActiveSecurityLevel: Trusted SelectedSecurityLevel: Off ThreatMitigationLevel: Trusted CaptivePortal: OnlineStatus: Online ```
Network: 77/86 Connections ``` ProfileName: Vivaldi Profile: 5**b9a91-**ef-4f**-**a8-3c50***c6937 Source: local ProcessName: vivaldi.exe BinaryPath: C:\Users\****\AppData\Local\Vivaldi\Application\vivaldi.exe CmdLine: "C:\Users\****\AppData\Local\Vivaldi\Application\vivaldi.exe" PID: 16056 accepted 192.168.117.1:61381 UDP> 239.255.255.250:1900 10:24:59-10:25:09 P#16056 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:61385 UDP> 239.255.255.250:1900 10:24:59-10:25:09 P#16056 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.78.1:61384 UDP> 239.255.255.250:1900 10:24:59-10:25:09 P#16056 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.184.1:61383 UDP> 239.255.255.250:1900 10:24:59-10:25:09 P#16056 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.137.1:61382 UDP> 239.255.255.250:1900 10:24:59-10:25:09 P#16056 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.117.1:50064 UDP> 239.255.255.250:1900 10:26:59-10:27:14 P#16056 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:50068 UDP> 239.255.255.250:1900 10:26:59-10:27:14 P#16056 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.137.1:50065 UDP> 239.255.255.250:1900 10:26:59-10:27:14 P#16056 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.184.1:50066 UDP> 239.255.255.250:1900 10:26:59-10:27:14 P#16056 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.78.1:50067 UDP> 239.255.255.250:1900 10:26:59-10:27:14 P#16056 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.184.1:56394 UDP> 239.255.255.250:1900 10:28:59-10:29:09 P#16056 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.137.1:56393 UDP> 239.255.255.250:1900 10:28:59-10:29:09 P#16056 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:56396 UDP> 239.255.255.250:1900 10:28:59-10:29:09 P#16056 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.117.1:56392 UDP> 239.255.255.250:1900 10:28:59-10:29:09 P#16056 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.78.1:56395 UDP> 239.255.255.250:1900 10:28:59-10:29:09 P#16056 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.184.1:53509 UDP> 239.255.255.250:1900 10:30:59-10:31:14 P#16056 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:53511 UDP> 239.255.255.250:1900 10:30:59-10:31:14 P#16056 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.78.1:53510 UDP> 239.255.255.250:1900 10:30:59-10:31:14 P#16056 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.117.1:53507 UDP> 239.255.255.250:1900 10:30:59-10:31:14 P#16056 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.137.1:53508 UDP> 239.255.255.250:1900 10:30:59-10:31:14 P#16056 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.137.1:53112 UDP> 239.255.255.250:1900 10:32:59-10:33:09 P#16056 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.184.1:53113 UDP> 239.255.255.250:1900 10:32:59-10:33:09 P#16056 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.117.1:53111 UDP> 239.255.255.250:1900 10:32:59-10:33:09 P#16056 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:53115 UDP> 239.255.255.250:1900 10:32:59-10:33:09 P#16056 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.78.1:53114 UDP> 239.255.255.250:1900 10:32:59-10:33:09 P#16056 [M] allowed by default action - by filter/defaultAction @ global ProfileName: Vivaldi Profile: 5**b9a91-**ef-4f**-**a8-3c50***c6937 Source: local ProcessName: vivaldi.exe BinaryPath: C:\Users\****\AppData\Local\Vivaldi\Application\vivaldi.exe CmdLine: "C:\Users\****\AppData\Local\Vivaldi\Application\vivaldi.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1784,6180132427718829713,2755579714283125115,131072 --lang=en-GB --running-vivaldi --service-sandbox-type=none --start-stack-profiler --mojo-platform-channel-handle=2224 /prefetch:8 PID: 16280 accepted 192.168.26.5:1039 TCP> 185.70.42.42:443 to mail.protonmail.com. 09:30:00- P#16280 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:16870 TCP> 81.3.6.164:443 to mail.tutanota.com. 09:30:30- P#16280 [IM] connection by Portmaster - by @ global accepted 192.168.26.5:12199 TCP> 140.82.113.26:443 to alive.github.com. 10:06:05- P#16280 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:26899 TCP> 185.199.111.133:443 to avatars.githubusercontent.com. 10:19:52-10:25:29 P#16280 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:11048 TCP> 157.240.208.60:443 to web.whatsapp.com. 10:19:53-10:27:04 P#16280 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:33667 TCP> 104.18.11.212:443 to grsm.io. 10:21:46-10:24:04 P#16280 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:19865 TCP> 108.61.13.174:443 to vultr.com. 10:22:52-10:24:04 P#16280 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:2416 TCP> 104.17.140.186:443 to www.vultr.com. 10:22:53-10:25:29 P#16280 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:2054 TCP> 104.18.6.218:443 to js.partnerstack.com. 10:22:55-10:25:29 P#16280 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:1026 TCP> 142.251.36.10:443 to fonts.googleapis.com. 10:22:56-10:25:29 P#16280 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:1028 TCP> 104.18.10.212:443 to grsm.io. 10:22:56-10:25:29 P#16280 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:51907 UDP> 103.168.122.76:443 to r1---sn-apou5n5gu5-jb3z.googlevideo.com. 10:23:12-10:23:54 P#16280 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:49286 UDP> 172.217.25.206:443 to www.youtube.com. 10:23:38-10:24:14 P#16280 [M] allowed by default action - by filter/defaultAction @ global dropped 224.0.0.251:5353 103.168.122.76:443 to r1---sn-apou5n5gu5-jb3z.googlevideo.com. 10:24:06-10:25:29 P#16280 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:62122 UDP> 216.58.214.14:443 to play.google.com. 10:24:15-10:24:54 P#16280 [M] allowed by default action - by filter/defaultAction @ global dropped 224.0.0.251:5353 172.217.25.206:443 to www.youtube.com. 10:24:18-10:24:54 P#16280 [M] allowed by default action - by filter/defaultAction @ global blocked 192.168.26.5:56244 UDP> 104.17.141.186:443 to my.vultr.com. 10:24:23-10:24:34 P#16280 [M] denied by rule: domain matches my.vultr.com - by filter/endpoints @ core:profiles/local/5**b9a91-**ef-4f**-**a8-3c50***c6937 accepted 192.168.26.5:51684 UDP> 142.251.36.10:443 to fonts.googleapis.com. 10:24:24-10:24:34 P#16280 [M] allowed by default action - by filter/defaultAction @ global blocked 192.168.26.5:1029 TCP> 104.17.140.186:443 to my.vultr.com. 10:24:43-10:25:29 P#16280 [M] denied by rule: domain matches my.vultr.com - by filter/endpoints @ core:profiles/local/5**b9a91-**ef-4f**-**a8-3c50***c6937 blocked 192.168.26.5:31162 TCP> 104.17.141.186:443 to my.vultr.com. 10:24:56-10:25:29 P#16280 [M] denied by rule: domain matches my.vultr.com - by filter/endpoints @ core:profiles/local/5**b9a91-**ef-4f**-**a8-3c50***c6937 accepted 192.168.26.5:61380 UDP> 216.58.196.14:443 to www.youtube.com. 10:24:58-10:25:34 P#16280 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:1029 TCP> 106.10.249.76:993 to imap.mail.yahoo.com. 10:25:26-10:33:39 P#16280 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:19442 TCP> 142.251.36.10:443 to fonts.googleapis.com. 10:25:27-10:26:29 P#16280 [M] allowed by default action - by filter/defaultAction @ global blocked 192.168.26.5:61656 UDP> 104.17.140.186:443 to my.vultr.com. 10:25:27-10:25:39 P#16280 [M] denied by rule: domain matches my.vultr.com - by filter/endpoints @ core:profiles/local/5**b9a91-**ef-4f**-**a8-3c50***c6937 accepted 192.168.26.5:1028 TCP> 142.251.36.10:443 to fonts.googleapis.com. 10:25:27-10:26:29 P#16280 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:50541 UDP> 216.58.196.14:443 to www.youtube.com. 10:25:38-10:26:14 P#16280 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:65057 UDP> 142.250.179.206:443 to translate.google.com. 10:25:42-10:26:19 P#16280 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:61381 UDP> 103.168.122.76:443 to r1---sn-apou5n5gu5-jb3z.googlevideo.com. 10:25:46-10:26:29 P#16280 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:8029 TCP> 185.199.110.133:443 to avatars.githubusercontent.com. 10:25:49-10:26:29 P#16280 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:1030 TCP> 185.199.110.133:443 to avatars.githubusercontent.com. 10:25:49-10:26:29 P#16280 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:19651 TCP> 185.199.110.133:443 to avatars.githubusercontent.com. 10:25:49-10:26:29 P#16280 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:13077 TCP> 185.199.110.133:443 to avatars.githubusercontent.com. 10:25:49-10:26:29 P#16280 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:21121 TCP> 185.199.110.133:443 to avatars.githubusercontent.com. 10:25:49-10:26:29 P#16280 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:3670 TCP> 185.199.110.133:443 to avatars.githubusercontent.com. 10:25:49- P#16280 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:49855 UDP> 216.58.196.14:443 to www.youtube.com. 10:26:18-10:26:54 P#16280 [M] allowed by default action - by filter/defaultAction @ global dropped 224.0.0.251:5353 103.168.122.76:443 to r1---sn-apou5n5gu5-jb3z.googlevideo.com. 10:26:35-10:27:14 P#16280 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:50062 UDP> 216.58.196.14:443 to www.youtube.com. 10:26:58-10:27:34 P#16280 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:1026 TCP> 157.240.208.60:443 to web.whatsapp.com. 10:27:03- P#16280 [M] allowed by default action - by filter/defaultAction @ global dropped 224.0.0.251:5353 103.168.122.76:443 to r1---sn-apou5n5gu5-jb3z.googlevideo.com. 10:27:13-10:28:04 P#16280 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:53455 UDP> 216.58.200.14:443 to www.youtube.com. 10:27:38-10:28:14 P#16280 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:63497 UDP> 103.168.122.76:443 to r1---sn-apou5n5gu5-jb3z.googlevideo.com. 10:28:16-10:29:09 P#16280 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:55596 UDP> 216.58.200.14:443 to www.youtube.com. 10:28:18-10:28:54 P#16280 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:56390 UDP> 172.217.26.78:443 to www.youtube.com. 10:28:58-10:29:34 P#16280 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:51727 UDP> 103.168.122.76:443 to r1---sn-apou5n5gu5-jb3z.googlevideo.com. 10:29:05-10:29:39 P#16280 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:49164 UDP> 172.217.26.78:443 to www.youtube.com. 10:29:38-10:30:14 P#16280 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:64334 UDP> 103.168.122.76:443 to r1---sn-apou5n5gu5-jb3z.googlevideo.com. 10:29:53-10:30:34 P#16280 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:62958 UDP> 216.58.200.14:443 to www.youtube.com. 10:30:18-10:30:54 P#16280 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:56679 UDP> 103.168.122.76:443 to r1---sn-apou5n5gu5-jb3z.googlevideo.com. 10:30:46-10:32:09 P#16280 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:53504 UDP> 216.58.200.14:443 to www.youtube.com. 10:30:58-10:31:29 P#16280 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:50998 UDP> 172.217.25.206:443 to www.youtube.com. 10:31:38-10:32:14 P#16280 [M] allowed by default action - by filter/defaultAction @ global dropped 224.0.0.251:5353 172.217.25.206:443 to www.youtube.com. 10:32:18-10:32:54 P#16280 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:63285 UDP> 103.168.122.76:443 to r1---sn-apou5n5gu5-jb3z.googlevideo.com. 10:32:26-10:33:14 P#16280 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:22882 TCP> 20.205.243.166:443 to github.com. 10:32:55- P#16280 [IM] connection by Portmaster - by @ global accepted 192.168.26.5:53109 UDP> 172.217.26.78:443 to www.youtube.com. 10:32:58-10:33:34 P#16280 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:64171 UDP> 103.168.122.76:443 to r1---sn-apou5n5gu5-jb3z.googlevideo.com. 10:33:16- P#16280 [M] allowed by default action - by filter/defaultAction @ global accepted 192.168.26.5:55000 UDP> 172.217.26.78:443 to www.youtube.com. 10:33:38- P#16280 [M] allowed by default action - by filter/defaultAction @ global ```
No Module Error
Unexpected Logs ``` 211111 10:33:35.906 er/rrcache:212 > WARN 705 resolver: failed to parse cached record "\n;; OPT PSEUDOSECTION:\n; EDNS: version 0; flags: ; udp: 1452\n; PADDING: 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000": resulted in nil record 211111 10:33:35.919 er/rrcache:212 > WARN 708 resolver: failed to parse cached record "\n;; OPT PSEUDOSECTION:\n; EDNS: version 0; flags: ; udp: 1452\n; PADDING: 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000": resulted in nil record 211111 10:33:35.919 er/rrcache:212 > WARN 711 resolver: failed to parse cached record "\n;; OPT PSEUDOSECTION:\n; EDNS: version 0; flags: ; udp: 1452\n; PADDING: 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000": resulted in nil record 211111 10:33:35.926 er/rrcache:212 > WARN 715 resolver: failed to parse cached record "\n;; OPT PSEUDOSECTION:\n; EDNS: version 0; flags: ; udp: 1452\n; PADDING: 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000": resulted in nil record 211111 10:33:35.926 er/rrcache:212 > WARN 717 resolver: failed to parse cached record "\n;; OPT PSEUDOSECTION:\n; EDNS: version 0; flags: ; udp: 1452\n; PADDING: 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000": resulted in nil record 211111 10:33:35.931 er/rrcache:212 > WARN 722 resolver: failed to parse cached record "\n;; OPT PSEUDOSECTION:\n; EDNS: version 0; flags: ; udp: 1452\n; PADDING: 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000": resulted in nil record 211111 10:33:35.956 er/rrcache:212 > WARN 727 resolver: failed to parse cached record "\n;; OPT PSEUDOSECTION:\n; EDNS: version 0; flags: ; udp: 1452\n; PADDING: 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000": resulted in nil record 211111 10:33:38.950 er/rrcache:212 > WARN 738 resolver: failed to parse cached record "\n;; OPT PSEUDOSECTION:\n; EDNS: version 0; flags: ; udp: 1452\n; PADDING: 0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000": resulted in nil record 211111 10:33:40.324 er/rrcache:212 > WARN 744 resolver: failed to parse cached record "\n;; OPT PSEUDOSECTION:\n; EDNS: version 0; flags: ; udp: 1452\n; PADDING: 0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000": resulted in nil record 211111 10:33:41.284 er/rrcache:212 > WARN 754 resolver: failed to parse cached record "\n;; OPT PSEUDOSECTION:\n; EDNS: version 0; flags: ; udp: 1452\n; PADDING: 0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000": resulted in nil record 211111 10:33:41.900 CURRENT TIME ```
Goroutine Stack ``` goroutine profile: total 63 11 @ 0x6de1a 0x7de2f 0x3e9b65 0x3ea1d7 0x9faa1 # 0x3e9b64 github.com/safing/portbase/api.(*DatabaseAPI).processSub+0x224 /home/user/git/safing/portbase/api/database.go:413 # 0x3ea1d6 github.com/safing/portbase/api.(*DatabaseAPI).handleQsub+0x136 /home/user/git/safing/portbase/api/database.go:476 8 @ 0x6de1a 0x7de2f 0x6d3fea 0x9faa1 # 0x6d3fe9 github.com/xtaci/kcp-go/v5.(*TimedSched).sched+0x2c9 /home/user/go/pkg/mod/github.com/xtaci/kcp-go/v5@v5.6.1/timedsched.go:67 2 @ 0x6de1a 0x63e65 0x99265 0xdae0c 0xdc145 0xdd31f 0x1cdf36 0x1dcf95 0x267bea 0x267d76 0x3c4487 0x3c6a0b 0x3c7adb 0x3c8296 0x3e75aa 0x3aaf67 0x3aa67e 0x3acd65 0x9faa1 # 0x99264 internal/poll.runtime_pollWait+0x64 /usr/local/go/src/runtime/netpoll.go:222 # 0xdae0b internal/poll.(*pollDesc).wait+0x4b /usr/local/go/src/internal/poll/fd_poll_runtime.go:87 # 0xdc144 internal/poll.execIO+0x104 /usr/local/go/src/internal/poll/fd_windows.go:175 # 0xdd31e internal/poll.(*FD).Read+0x2fe /usr/local/go/src/internal/poll/fd_windows.go:441 # 0x1cdf35 net.(*netFD).Read+0x55 /usr/local/go/src/net/fd_posix.go:55 # 0x1dcf94 net.(*conn).Read+0x94 /usr/local/go/src/net/net.go:182 # 0x267be9 bufio.(*Reader).fill+0x109 /usr/local/go/src/bufio/bufio.go:101 # 0x267d75 bufio.(*Reader).Peek+0x55 /usr/local/go/src/bufio/bufio.go:139 # 0x3c4486 github.com/gorilla/websocket.(*Conn).read+0x46 /home/user/go/pkg/mod/github.com/gorilla/websocket@v1.4.2/conn.go:370 # 0x3c6a0a github.com/gorilla/websocket.(*Conn).advanceFrame+0x6a /home/user/go/pkg/mod/github.com/gorilla/websocket@v1.4.2/conn.go:798 # 0x3c7ada github.com/gorilla/websocket.(*Conn).NextReader+0x9a /home/user/go/pkg/mod/github.com/gorilla/websocket@v1.4.2/conn.go:980 # 0x3c8295 github.com/gorilla/websocket.(*Conn).ReadMessage+0x35 /home/user/go/pkg/mod/github.com/gorilla/websocket@v1.4.2/conn.go:1064 # 0x3e75a9 github.com/safing/portbase/api.(*DatabaseAPI).handler+0x49 /home/user/git/safing/portbase/api/database.go:149 # 0x3aaf66 github.com/safing/portbase/modules.(*Module).runWorker+0xa6 /home/user/git/safing/portbase/modules/worker.go:119 # 0x3aa67d github.com/safing/portbase/modules.(*Module).RunWorker+0x9d /home/user/git/safing/portbase/modules/worker.go:47 # 0x3acd64 github.com/safing/portbase/modules.(*Module).StartWorker.func1+0x64 /home/user/git/safing/portbase/modules/worker.go:27 2 @ 0x6de1a 0x7de2f 0x39d458 0x3aaf67 0x3aa9b1 0x9faa1 # 0x39d457 github.com/safing/portbase/database.(*Interface).DelayedCacheWriter+0x1d7 /home/user/git/safing/portbase/database/interface_cache.go:34 # 0x3aaf66 github.com/safing/portbase/modules.(*Module).runWorker+0xa6 /home/user/git/safing/portbase/modules/worker.go:119 # 0x3aa9b0 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x130 /home/user/git/safing/portbase/modules/worker.go:78 2 @ 0x6de1a 0x7de2f 0x3b4b05 0x3aaf67 0x3aa9b1 0x9faa1 # 0x3b4b04 github.com/safing/portbase/rng.(*Feeder).run+0x2e4 /home/user/git/safing/portbase/rng/entropy.go:119 # 0x3aaf66 github.com/safing/portbase/modules.(*Module).runWorker+0xa6 /home/user/git/safing/portbase/modules/worker.go:119 # 0x3aa9b0 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x130 /home/user/git/safing/portbase/modules/worker.go:78 2 @ 0x6de1a 0x7de2f 0x3e8085 0x3aaf67 0x3aa67e 0x3acd65 0x9faa1 # 0x3e8084 github.com/safing/portbase/api.(*DatabaseAPI).writer+0x124 /home/user/git/safing/portbase/api/database.go:216 # 0x3aaf66 github.com/safing/portbase/modules.(*Module).runWorker+0xa6 /home/user/git/safing/portbase/modules/worker.go:119 # 0x3aa67d github.com/safing/portbase/modules.(*Module).RunWorker+0x9d /home/user/git/safing/portbase/modules/worker.go:47 # 0x3acd64 github.com/safing/portbase/modules.(*Module).StartWorker.func1+0x64 /home/user/git/safing/portbase/modules/worker.go:27 2 @ 0x6de1a 0x7de2f 0x3e9b65 0x3e9772 0x9faa1 # 0x3e9b64 github.com/safing/portbase/api.(*DatabaseAPI).processSub+0x224 /home/user/git/safing/portbase/api/database.go:413 # 0x3e9771 github.com/safing/portbase/api.(*DatabaseAPI).handleSub+0xd1 /home/user/git/safing/portbase/api/database.go:385 1 @ 0x34875 0x9c249 0x3565fa 0x717c6f 0x716891 0x9faa1 # 0x9c248 syscall.Syscall+0xe8 /usr/local/go/src/runtime/syscall_windows.go:188 # 0x3565f9 golang.org/x/sys/windows.(*Proc).Call+0x139 /home/user/go/pkg/mod/golang.org/x/sys@v0.0.0-20211015200801-69063c4bb744/windows/dll_windows.go:170 # 0x717c6e github.com/safing/portmaster/firewall/interception/windowskext.RecvVerdictRequest+0x16e /home/user/git/safing/portmaster/firewall/interception/windowskext/kext.go:167 # 0x716890 github.com/safing/portmaster/firewall/interception/windowskext.Handler+0xb0 /home/user/git/safing/portmaster/firewall/interception/windowskext/handler.go:59 1 @ 0x34875 0x9c392 0xb7765 0xb51ef 0xdd251 0xe4efe 0xe4ed1 0x269eeb 0x3ff4ac 0x9faa1 # 0x9c391 syscall.Syscall6+0xf1 /usr/local/go/src/runtime/syscall_windows.go:201 # 0xb7764 syscall.ReadFile+0x104 /usr/local/go/src/syscall/zsyscall_windows.go:313 # 0xb51ee syscall.Read+0x6e /usr/local/go/src/syscall/syscall_windows.go:369 # 0xdd250 internal/poll.(*FD).Read+0x230 /usr/local/go/src/internal/poll/fd_windows.go:427 # 0xe4efd os.(*File).read+0x7d /usr/local/go/src/os/file_posix.go:31 # 0xe4ed0 os.(*File).Read+0x50 /usr/local/go/src/os/file.go:116 # 0x269eea bufio.(*Scanner).Scan+0xaa /usr/local/go/src/bufio/scan.go:214 # 0x3ff4ab github.com/safing/portbase/run.inputSignals+0x8b /home/user/git/safing/portbase/run/main.go:116 1 @ 0x3d053 0x9b329 0x3fec29 0x9faa1 # 0x9b328 os/signal.signal_recv+0xa8 /usr/local/go/src/runtime/sigqueue.go:147 # 0x3fec28 os/signal.loop+0x28 /usr/local/go/src/os/signal/signal_unix.go:23 1 @ 0x6de1a 0x36ada 0x3670b 0x63f54c 0x3aaf67 0x3aa9b1 0x9faa1 # 0x63f54b github.com/safing/portmaster/resolver.listenToMDNS+0x54b /home/user/git/safing/portmaster/resolver/resolver-mdns.go:132 # 0x3aaf66 github.com/safing/portbase/modules.(*Module).runWorker+0xa6 /home/user/git/safing/portbase/modules/worker.go:119 # 0x3aa9b0 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x130 /home/user/git/safing/portbase/modules/worker.go:78 1 @ 0x6de1a 0x63e65 0x99265 0xdae0c 0xdc145 0xdd31f 0x1cdf36 0x1dcf95 0x2262e7 0x132cdb 0x226533 0x22334d 0x22966d 0x229681 0xadb2e 0x139aac 0x139ab7 0x401e4e 0x4017d0 0x645592 0x3aaf67 0x3aa67e 0x3acd65 0x9faa1 # 0x99264 internal/poll.runtime_pollWait+0x64 /usr/local/go/src/runtime/netpoll.go:222 # 0xdae0b internal/poll.(*pollDesc).wait+0x4b /usr/local/go/src/internal/poll/fd_poll_runtime.go:87 # 0xdc144 internal/poll.execIO+0x104 /usr/local/go/src/internal/poll/fd_windows.go:175 # 0xdd31e internal/poll.(*FD).Read+0x2fe /usr/local/go/src/internal/poll/fd_windows.go:441 # 0x1cdf35 net.(*netFD).Read+0x55 /usr/local/go/src/net/fd_posix.go:55 # 0x1dcf94 net.(*conn).Read+0x94 /usr/local/go/src/net/net.go:182 # 0x2262e6 crypto/tls.(*atLeastReader).Read+0x66 /usr/local/go/src/crypto/tls/conn.go:779 # 0x132cda bytes.(*Buffer).ReadFrom+0xba /usr/local/go/src/bytes/buffer.go:204 # 0x226532 crypto/tls.(*Conn).readFromUntil+0xf2 /usr/local/go/src/crypto/tls/conn.go:801 # 0x22334c crypto/tls.(*Conn).readRecordOrCCS+0x12c /usr/local/go/src/crypto/tls/conn.go:608 # 0x22966c crypto/tls.(*Conn).readRecord+0x16c /usr/local/go/src/crypto/tls/conn.go:576 # 0x229680 crypto/tls.(*Conn).Read+0x180 /usr/local/go/src/crypto/tls/conn.go:1252 # 0xadb2d io.ReadAtLeast+0x8d /usr/local/go/src/io/io.go:314 # 0x139aab io.ReadFull+0x4eb /usr/local/go/src/io/io.go:333 # 0x139ab6 encoding/binary.Read+0x4f6 /usr/local/go/src/encoding/binary/binary.go:166 # 0x401e4d github.com/miekg/dns.(*Conn).ReadMsgHeader+0x38d /home/user/go/pkg/mod/github.com/miekg/dns@v1.1.43/client.go:259 # 0x4017cf github.com/miekg/dns.(*Conn).ReadMsg+0x4f /home/user/go/pkg/mod/github.com/miekg/dns@v1.1.43/client.go:214 # 0x645591 github.com/safing/portmaster/resolver.(*tcpResolverConn).reader+0x91 /home/user/git/safing/portmaster/resolver/resolver-tcp.go:397 # 0x3aaf66 github.com/safing/portbase/modules.(*Module).runWorker+0xa6 /home/user/git/safing/portbase/modules/worker.go:119 # 0x3aa67d github.com/safing/portbase/modules.(*Module).RunWorker+0x9d /home/user/git/safing/portbase/modules/worker.go:47 # 0x3acd64 github.com/safing/portbase/modules.(*Module).StartWorker.func1+0x64 /home/user/git/safing/portbase/modules/worker.go:27 1 @ 0x6de1a 0x63e65 0x99265 0xdae0c 0xdc145 0xdd31f 0x1cdf36 0x1dcf95 0x2d539f 0x9faa1 # 0x99264 internal/poll.runtime_pollWait+0x64 /usr/local/go/src/runtime/netpoll.go:222 # 0xdae0b internal/poll.(*pollDesc).wait+0x4b /usr/local/go/src/internal/poll/fd_poll_runtime.go:87 # 0xdc144 internal/poll.execIO+0x104 /usr/local/go/src/internal/poll/fd_windows.go:175 # 0xdd31e internal/poll.(*FD).Read+0x2fe /usr/local/go/src/internal/poll/fd_windows.go:441 # 0x1cdf35 net.(*netFD).Read+0x55 /usr/local/go/src/net/fd_posix.go:55 # 0x1dcf94 net.(*conn).Read+0x94 /usr/local/go/src/net/net.go:182 # 0x2d539e net/http.(*connReader).backgroundRead+0x5e /usr/local/go/src/net/http/server.go:690 1 @ 0x6de1a 0x63e65 0x99265 0xdae0c 0xdc145 0xdd31f 0x1cdf36 0x1dcf95 0x641813 0x64deb1 0x3aaf67 0x3aa9b1 0x9faa1 # 0x99264 internal/poll.runtime_pollWait+0x64 /usr/local/go/src/runtime/netpoll.go:222 # 0xdae0b internal/poll.(*pollDesc).wait+0x4b /usr/local/go/src/internal/poll/fd_poll_runtime.go:87 # 0xdc144 internal/poll.execIO+0x104 /usr/local/go/src/internal/poll/fd_windows.go:175 # 0xdd31e internal/poll.(*FD).Read+0x2fe /usr/local/go/src/internal/poll/fd_windows.go:441 # 0x1cdf35 net.(*netFD).Read+0x55 /usr/local/go/src/net/fd_posix.go:55 # 0x1dcf94 net.(*conn).Read+0x94 /usr/local/go/src/net/net.go:182 # 0x641812 github.com/safing/portmaster/resolver.listenForDNSPackets+0x92 /home/user/git/safing/portmaster/resolver/resolver-mdns.go:330 # 0x64deb0 github.com/safing/portmaster/resolver.listenToMDNS.func1+0x50 /home/user/git/safing/portmaster/resolver/resolver-mdns.go:88 # 0x3aaf66 github.com/safing/portbase/modules.(*Module).runWorker+0xa6 /home/user/git/safing/portbase/modules/worker.go:119 # 0x3aa9b0 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x130 /home/user/git/safing/portbase/modules/worker.go:78 1 @ 0x6de1a 0x63e65 0x99265 0xdae0c 0xdc145 0xdd31f 0x1cdf36 0x1dcf95 0x641813 0x64dfb1 0x3aaf67 0x3aa9b1 0x9faa1 # 0x99264 internal/poll.runtime_pollWait+0x64 /usr/local/go/src/runtime/netpoll.go:222 # 0xdae0b internal/poll.(*pollDesc).wait+0x4b /usr/local/go/src/internal/poll/fd_poll_runtime.go:87 # 0xdc144 internal/poll.execIO+0x104 /usr/local/go/src/internal/poll/fd_windows.go:175 # 0xdd31e internal/poll.(*FD).Read+0x2fe /usr/local/go/src/internal/poll/fd_windows.go:441 # 0x1cdf35 net.(*netFD).Read+0x55 /usr/local/go/src/net/fd_posix.go:55 # 0x1dcf94 net.(*conn).Read+0x94 /usr/local/go/src/net/net.go:182 # 0x641812 github.com/safing/portmaster/resolver.listenForDNSPackets+0x92 /home/user/git/safing/portmaster/resolver/resolver-mdns.go:330 # 0x64dfb0 github.com/safing/portmaster/resolver.listenToMDNS.func3+0x50 /home/user/git/safing/portmaster/resolver/resolver-mdns.go:110 # 0x3aaf66 github.com/safing/portbase/modules.(*Module).runWorker+0xa6 /home/user/git/safing/portbase/modules/worker.go:119 # 0x3aa9b0 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x130 /home/user/git/safing/portbase/modules/worker.go:78 1 @ 0x6de1a 0x63e65 0x99265 0xdae0c 0xdc145 0xdd31f 0x1cdf36 0x1dcf95 0x641813 0x64e031 0x3aaf67 0x3aa9b1 0x9faa1 # 0x99264 internal/poll.runtime_pollWait+0x64 /usr/local/go/src/runtime/netpoll.go:222 # 0xdae0b internal/poll.(*pollDesc).wait+0x4b /usr/local/go/src/internal/poll/fd_poll_runtime.go:87 # 0xdc144 internal/poll.execIO+0x104 /usr/local/go/src/internal/poll/fd_windows.go:175 # 0xdd31e internal/poll.(*FD).Read+0x2fe /usr/local/go/src/internal/poll/fd_windows.go:441 # 0x1cdf35 net.(*netFD).Read+0x55 /usr/local/go/src/net/fd_posix.go:55 # 0x1dcf94 net.(*conn).Read+0x94 /usr/local/go/src/net/net.go:182 # 0x641812 github.com/safing/portmaster/resolver.listenForDNSPackets+0x92 /home/user/git/safing/portmaster/resolver/resolver-mdns.go:330 # 0x64e030 github.com/safing/portmaster/resolver.listenToMDNS.func4+0x50 /home/user/git/safing/portmaster/resolver/resolver-mdns.go:121 # 0x3aaf66 github.com/safing/portbase/modules.(*Module).runWorker+0xa6 /home/user/git/safing/portbase/modules/worker.go:119 # 0x3aa9b0 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x130 /home/user/git/safing/portbase/modules/worker.go:78 1 @ 0x6de1a 0x63e65 0x99265 0xdae0c 0xdc145 0xdde59 0x1ce065 0x1e7585 0x1e5ce5 0x44c785 0x437659 0x434a0a 0x4361ef 0x43525a 0x731965 0x3aaf67 0x3aa9b1 0x9faa1 # 0x99264 internal/poll.runtime_pollWait+0x64 /usr/local/go/src/runtime/netpoll.go:222 # 0xdae0b internal/poll.(*pollDesc).wait+0x4b /usr/local/go/src/internal/poll/fd_poll_runtime.go:87 # 0xdc144 internal/poll.execIO+0x104 /usr/local/go/src/internal/poll/fd_windows.go:175 # 0xdde58 internal/poll.(*FD).ReadFrom+0x118 /usr/local/go/src/internal/poll/fd_windows.go:581 # 0x1ce064 net.(*netFD).readFrom+0x64 /usr/local/go/src/net/fd_posix.go:61 # 0x1e7584 net.(*UDPConn).readFrom+0x64 /usr/local/go/src/net/udpsock_posix.go:47 # 0x1e5ce4 net.(*UDPConn).ReadFrom+0x64 /usr/local/go/src/net/udpsock.go:118 # 0x44c784 github.com/miekg/dns.ReadFromSessionUDP+0x64 /home/user/go/pkg/mod/github.com/miekg/dns@v1.1.43/udp_windows.go:19 # 0x437658 github.com/miekg/dns.(*Server).readUDP+0xd8 /home/user/go/pkg/mod/github.com/miekg/dns@v1.1.43/server.go:687 # 0x434a09 github.com/miekg/dns.defaultReader.ReadUDP+0x49 /home/user/go/pkg/mod/github.com/miekg/dns@v1.1.43/server.go:174 # 0x4361ee github.com/miekg/dns.(*Server).serveUDP+0x20e /home/user/go/pkg/mod/github.com/miekg/dns@v1.1.43/server.go:501 # 0x435259 github.com/miekg/dns.(*Server).ListenAndServe+0x339 /home/user/go/pkg/mod/github.com/miekg/dns@v1.1.43/server.go:330 # 0x731964 github.com/safing/portmaster/nameserver.startListener.func1+0x44 /home/user/git/safing/portmaster/nameserver/module.go:107 # 0x3aaf66 github.com/safing/portbase/modules.(*Module).runWorker+0xa6 /home/user/git/safing/portbase/modules/worker.go:119 # 0x3aa9b0 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x130 /home/user/git/safing/portbase/modules/worker.go:78 1 @ 0x6de1a 0x63e65 0x99265 0xdae0c 0xdc145 0xdf759 0xdfa0a 0x1cf6c5 0x1e4fb9 0x1e3acb 0x2dfb4e 0x2df87e 0x3f1cb4 0x3aaf67 0x3aa67e 0x3f0136 0x9faa1 # 0x99264 internal/poll.runtime_pollWait+0x64 /usr/local/go/src/runtime/netpoll.go:222 # 0xdae0b internal/poll.(*pollDesc).wait+0x4b /usr/local/go/src/internal/poll/fd_poll_runtime.go:87 # 0xdc144 internal/poll.execIO+0x104 /usr/local/go/src/internal/poll/fd_windows.go:175 # 0xdf758 internal/poll.(*FD).acceptOne+0x98 /usr/local/go/src/internal/poll/fd_windows.go:810 # 0xdfa09 internal/poll.(*FD).Accept+0x169 /usr/local/go/src/internal/poll/fd_windows.go:844 # 0x1cf6c4 net.(*netFD).accept+0x84 /usr/local/go/src/net/fd_windows.go:139 # 0x1e4fb8 net.(*TCPListener).accept+0x38 /usr/local/go/src/net/tcpsock_posix.go:139 # 0x1e3aca net.(*TCPListener).Accept+0x6a /usr/local/go/src/net/tcpsock.go:261 # 0x2dfb4d net/http.(*Server).Serve+0x26d /usr/local/go/src/net/http/server.go:2937 # 0x2df87d net/http.(*Server).ListenAndServe+0xbd /usr/local/go/src/net/http/server.go:2866 # 0x3f1cb3 github.com/safing/portbase/api.Serve.func1+0x33 /home/user/git/safing/portbase/api/router.go:55 # 0x3aaf66 github.com/safing/portbase/modules.(*Module).runWorker+0xa6 /home/user/git/safing/portbase/modules/worker.go:119 # 0x3aa67d github.com/safing/portbase/modules.(*Module).RunWorker+0x9d /home/user/git/safing/portbase/modules/worker.go:47 # 0x3f0135 github.com/safing/portbase/api.Serve+0x1d5 /home/user/git/safing/portbase/api/router.go:54 1 @ 0x6de1a 0x7de2f 0x37b5f4 0x37b1d8 0x9faa1 # 0x37b5f3 github.com/safing/portbase/log.writer+0x3b3 /home/user/git/safing/portbase/log/output.go:156 # 0x37b1d7 github.com/safing/portbase/log.writerManager+0x97 /home/user/git/safing/portbase/log/output.go:113 1 @ 0x6de1a 0x7de2f 0x3a4018 0x9faa1 # 0x3a4017 github.com/safing/portbase/modules.microTaskScheduler+0x1b7 /home/user/git/safing/portbase/modules/microtasks.go:184 1 @ 0x6de1a 0x7de2f 0x3aa0c5 0x9faa1 # 0x3aa0c4 github.com/safing/portbase/modules.taskQueueHandler+0x1c4 /home/user/git/safing/portbase/modules/tasks.go:447 1 @ 0x6de1a 0x7de2f 0x3aa39e 0x9faa1 # 0x3aa39d github.com/safing/portbase/modules.taskScheduleHandler+0xfd /home/user/git/safing/portbase/modules/tasks.go:497 1 @ 0x6de1a 0x7de2f 0x3b4e3d 0x3aaf67 0x3aa9b1 0x9faa1 # 0x3b4e3c github.com/safing/portbase/rng.fullFeeder+0x15c /home/user/git/safing/portbase/rng/fullfeed.go:25 # 0x3aaf66 github.com/safing/portbase/modules.(*Module).runWorker+0xa6 /home/user/git/safing/portbase/modules/worker.go:119 # 0x3aa9b0 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x130 /home/user/git/safing/portbase/modules/worker.go:78 1 @ 0x6de1a 0x7de2f 0x3b58c5 0x3aaf67 0x3aa9b1 0x9faa1 # 0x3b58c4 github.com/safing/portbase/rng.osFeeder+0x1e4 /home/user/git/safing/portbase/rng/osfeeder.go:27 # 0x3aaf66 github.com/safing/portbase/modules.(*Module).runWorker+0xa6 /home/user/git/safing/portbase/modules/worker.go:119 # 0x3aa9b0 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x130 /home/user/git/safing/portbase/modules/worker.go:78 1 @ 0x6de1a 0x7de2f 0x3b61f4 0x3aaf67 0x3aa9b1 0x9faa1 # 0x3b61f3 github.com/safing/portbase/rng.tickFeeder+0x253 /home/user/git/safing/portbase/rng/tickfeeder.go:60 # 0x3aaf66 github.com/safing/portbase/modules.(*Module).runWorker+0xa6 /home/user/git/safing/portbase/modules/worker.go:119 # 0x3aa9b0 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x130 /home/user/git/safing/portbase/modules/worker.go:78 1 @ 0x6de1a 0x7de2f 0x3ff1b8 0x732370 0x6da49 0x9faa1 # 0x3ff1b7 github.com/safing/portbase/run.Run+0x237 /home/user/git/safing/portbase/run/main.go:66 # 0x73236f main.main+0xcf /home/user/git/safing/portmaster/cmds/portmaster-core/main.go:31 # 0x6da48 runtime.main+0x208 /usr/local/go/src/runtime/proc.go:204 1 @ 0x6de1a 0x7de2f 0x55d455 0x3aaf67 0x3aa9b1 0x9faa1 # 0x55d454 github.com/safing/portbase/notifications.cleaner+0x114 /home/user/git/safing/portbase/notifications/cleaner.go:13 # 0x3aaf66 github.com/safing/portbase/modules.(*Module).runWorker+0xa6 /home/user/git/safing/portbase/modules/worker.go:119 # 0x3aa9b0 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x130 /home/user/git/safing/portbase/modules/worker.go:78 1 @ 0x6de1a 0x7de2f 0x5822d8 0x3aaf67 0x3aa9b1 0x9faa1 # 0x5822d7 github.com/safing/portmaster/intel/geoip.(*updateWorker).run+0x117 /home/user/git/safing/portmaster/intel/geoip/database.go:173 # 0x3aaf66 github.com/safing/portbase/modules.(*Module).runWorker+0xa6 /home/user/git/safing/portbase/modules/worker.go:119 # 0x3aa9b0 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x130 /home/user/git/safing/portbase/modules/worker.go:78 1 @ 0x6de1a 0x7de2f 0x588a05 0x3aaf67 0x3aa9b1 0x9faa1 # 0x588a04 github.com/safing/portmaster/netenv.monitorNetworkChanges+0x164 /home/user/git/safing/portmaster/netenv/network-change.go:48 # 0x3aaf66 github.com/safing/portbase/modules.(*Module).runWorker+0xa6 /home/user/git/safing/portbase/modules/worker.go:119 # 0x3aa9b0 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x130 /home/user/git/safing/portbase/modules/worker.go:78 1 @ 0x6de1a 0x7de2f 0x589cfe 0x3aaf67 0x3aa9b1 0x9faa1 # 0x589cfd github.com/safing/portmaster/netenv.monitorOnlineStatus+0x13d /home/user/git/safing/portmaster/netenv/online-status.go:309 # 0x3aaf66 github.com/safing/portbase/modules.(*Module).runWorker+0xa6 /home/user/git/safing/portbase/modules/worker.go:119 # 0x3aa9b0 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x130 /home/user/git/safing/portbase/modules/worker.go:78 1 @ 0x6de1a 0x7de2f 0x59ad3c 0x3aaf67 0x3aa67e 0x3acd65 0x9faa1 # 0x59ad3b github.com/safing/portmaster/status.autoPilot+0xdb /home/user/git/safing/portmaster/status/autopilot.go:16 # 0x3aaf66 github.com/safing/portbase/modules.(*Module).runWorker+0xa6 /home/user/git/safing/portbase/modules/worker.go:119 # 0x3aa67d github.com/safing/portbase/modules.(*Module).RunWorker+0x9d /home/user/git/safing/portbase/modules/worker.go:47 # 0x3acd64 github.com/safing/portbase/modules.(*Module).StartWorker.func1+0x64 /home/user/git/safing/portbase/modules/worker.go:27 1 @ 0x6de1a 0x7de2f 0x624288 0x3aaf67 0x3aa9b1 0x9faa1 # 0x624287 github.com/safing/portmaster/profile.cleanActiveProfiles+0x187 /home/user/git/safing/portmaster/profile/active.go:84 # 0x3aaf66 github.com/safing/portbase/modules.(*Module).runWorker+0xa6 /home/user/git/safing/portbase/modules/worker.go:119 # 0x3aa9b0 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x130 /home/user/git/safing/portbase/modules/worker.go:78 1 @ 0x6de1a 0x7de2f 0x6306aa 0x3aaf67 0x3aa9b1 0x9faa1 # 0x6306a9 github.com/safing/portmaster/profile.startProfileUpdateChecker.func1+0x109 /home/user/git/safing/portmaster/profile/database.go:51 # 0x3aaf66 github.com/safing/portbase/modules.(*Module).runWorker+0xa6 /home/user/git/safing/portbase/modules/worker.go:119 # 0x3aa9b0 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x130 /home/user/git/safing/portbase/modules/worker.go:78 1 @ 0x6de1a 0x7de2f 0x63fa45 0x64e0a5 0x3aaf67 0x3aa9b1 0x9faa1 # 0x63fa44 github.com/safing/portmaster/resolver.handleMDNSMessages+0x104 /home/user/git/safing/portmaster/resolver/resolver-mdns.go:139 # 0x64e0a4 github.com/safing/portmaster/resolver.listenToMDNS.func5+0x44 /home/user/git/safing/portmaster/resolver/resolver-mdns.go:128 # 0x3aaf66 github.com/safing/portbase/modules.(*Module).runWorker+0xa6 /home/user/git/safing/portbase/modules/worker.go:119 # 0x3aa9b0 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x130 /home/user/git/safing/portbase/modules/worker.go:78 1 @ 0x6de1a 0x7de2f 0x644c25 0x3aaf67 0x3aa67e 0x3acd65 0x9faa1 # 0x644c24 github.com/safing/portmaster/resolver.(*tcpResolverConn).handler+0x284 /home/user/git/safing/portmaster/resolver/resolver-tcp.go:273 # 0x3aaf66 github.com/safing/portbase/modules.(*Module).runWorker+0xa6 /home/user/git/safing/portbase/modules/worker.go:119 # 0x3aa67d github.com/safing/portbase/modules.(*Module).RunWorker+0x9d /home/user/git/safing/portbase/modules/worker.go:47 # 0x3acd64 github.com/safing/portbase/modules.(*Module).StartWorker.func1+0x64 /home/user/git/safing/portbase/modules/worker.go:27 1 @ 0x6de1a 0x7de2f 0x6d4525 0x9faa1 # 0x6d4524 github.com/xtaci/kcp-go/v5.(*TimedSched).prepend+0x284 /home/user/go/pkg/mod/github.com/xtaci/kcp-go/v5@v5.6.1/timedsched.go:103 1 @ 0x6de1a 0x7de2f 0x6f8055 0x3aaf67 0x3aa9b1 0x9faa1 # 0x6f8054 github.com/safing/portmaster/network.connectionCleaner+0x114 /home/user/git/safing/portmaster/network/clean.go:24 # 0x3aaf66 github.com/safing/portbase/modules.(*Module).runWorker+0xa6 /home/user/git/safing/portbase/modules/worker.go:119 # 0x3aa9b0 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x130 /home/user/git/safing/portbase/modules/worker.go:78 1 @ 0x6de1a 0x7de2f 0x6fcfda 0x3aaf67 0x3aa9b1 0x9faa1 # 0x6fcfd9 github.com/safing/portmaster/network.openDNSRequestWriter+0x119 /home/user/git/safing/portmaster/network/dns.go:91 # 0x3aaf66 github.com/safing/portbase/modules.(*Module).runWorker+0xa6 /home/user/git/safing/portbase/modules/worker.go:119 # 0x3aa9b0 github.com/safing/portbase/modules.(*Module).runServiceWorker+0x130 /home/user/git/safing/portbase/modules/worker.go:78 1 @ 0x6de1a 0x7de2f 0x7253cc 0x3aaf67 0x3aa67e 0x3acd65 0x9faa1 # 0x7253cb github.com/safing/portmaster/firewall.packetHandler+0x10b /home/user/git/safing/portmaster/firewall/interception.go:486 # 0x3aaf66 github.com/safing/portbase/modules.(*Module).runWorker+0xa6 /home/user/git/safing/portbase/modules/worker.go:119 # 0x3aa67d github.com/safing/portbase/modules.(*Module).RunWorker+0x9d /home/user/git/safing/portbase/modules/worker.go:47 # 0x3acd64 github.com/safing/portbase/modules.(*Module).StartWorker.func1+0x64 /home/user/git/safing/portbase/modules/worker.go:27 1 @ 0x6de1a 0x7de2f 0x7256c9 0x3aaf67 0x3aa67e 0x3acd65 0x9faa1 # 0x7256c8 github.com/safing/portmaster/firewall.statLogger+0x248 /home/user/git/safing/portmaster/firewall/interception.go:500 # 0x3aaf66 github.com/safing/portbase/modules.(*Module).runWorker+0xa6 /home/user/git/safing/portbase/modules/worker.go:119 # 0x3aa67d github.com/safing/portbase/modules.(*Module).RunWorker+0x9d /home/user/git/safing/portbase/modules/worker.go:47 # 0x3acd64 github.com/safing/portbase/modules.(*Module).StartWorker.func1+0x64 /home/user/git/safing/portbase/modules/worker.go:27 1 @ 0x98ea5 0x3d92aa 0x3d9047 0x3d5b18 0x3e21b6 0x6f55a5 0x3ece84 0x3ec736 0x3f0a27 0x3f1d2c 0x3aaf67 0x3aa67e 0x3f0285 0x2df78a 0x2db72d 0x9faa1 # 0x98ea4 runtime/pprof.runtime_goroutineProfileWithLabels+0x64 /usr/local/go/src/runtime/mprof.go:716 # 0x3d92a9 runtime/pprof.writeRuntimeProfile+0xe9 /usr/local/go/src/runtime/pprof/pprof.go:724 # 0x3d9046 runtime/pprof.writeGoroutine+0xa6 /usr/local/go/src/runtime/pprof/pprof.go:684 # 0x3d5b17 runtime/pprof.(*Profile).WriteTo+0x3f7 /usr/local/go/src/runtime/pprof/pprof.go:331 # 0x3e21b5 github.com/safing/portbase/utils/debug.(*Info).AddGoroutineStack+0x95 /home/user/git/safing/portbase/utils/debug/debug.go:131 # 0x6f55a4 github.com/safing/portmaster/network.debugInfo+0x184 /home/user/git/safing/portmaster/network/api.go:84 # 0x3ece83 github.com/safing/portbase/api.(*Endpoint).ServeHTTP+0x723 /home/user/git/safing/portbase/api/endpoints.go:313 # 0x3ec735 github.com/safing/portbase/api.(*endpointHandler).ServeHTTP+0xb5 /home/user/git/safing/portbase/api/endpoints.go:262 # 0x3f0a26 github.com/safing/portbase/api.(*mainHandler).handle+0x786 /home/user/git/safing/portbase/api/router.go:162 # 0x3f1d2b github.com/safing/portbase/api.(*mainHandler).ServeHTTP.func1+0x4b /home/user/git/safing/portbase/api/router.go:73 # 0x3aaf66 github.com/safing/portbase/modules.(*Module).runWorker+0xa6 /home/user/git/safing/portbase/modules/worker.go:119 # 0x3aa67d github.com/safing/portbase/modules.(*Module).RunWorker+0x9d /home/user/git/safing/portbase/modules/worker.go:47 # 0x3f0284 github.com/safing/portbase/api.(*mainHandler).ServeHTTP+0xa4 /home/user/git/safing/portbase/api/router.go:72 # 0x2df789 net/http.serverHandler.ServeHTTP+0xa9 /usr/local/go/src/net/http/server.go:2843 # 0x2db72c net/http.(*conn).serve+0x8ac /usr/local/go/src/net/http/server.go:1925 ```
racrbmr commented 2 years ago

I try to resolve with nslookup to give more information. I do with my.vultr.com in the first one and then vultr.com below it.

C:\Users****>nslookup -debug my.vultr.com 127.0.0.1

Got answer: HEADER: opcode = QUERY, id = 1, rcode = NXDOMAIN header flags: response, want recursion questions = 1, answers = 0, authority records = 0, additional = 1

QUESTIONS:
    1.0.0.127.in-addr.arpa, type = PTR, class = IN
ADDITIONAL RECORDS:
->  info.portmaster
    text =

    "no answer found (NXDomain)"
    ttl = 0 (0 secs)

Server: UnKnown Address: 127.0.0.1


Got answer: HEADER: opcode = QUERY, id = 2, rcode = NOERROR header flags: response, want recursion questions = 1, answers = 1, authority records = 0, additional = 1

QUESTIONS:
    my.vultr.com, type = A, class = IN
ANSWERS:
->  my.vultr.com
    internet address = 0.0.0.17
    ttl = 1 (1 sec)
ADDITIONAL RECORDS:
->  info.portmaster
    text =

    "blocked: denied by rule: domain matches my.vultr.com"
    ttl = 0 (0 secs)

Non-authoritative answer:

Got answer: HEADER: opcode = QUERY, id = 3, rcode = NOERROR header flags: response, want recursion questions = 1, answers = 1, authority records = 0, additional = 1

QUESTIONS:
    my.vultr.com, type = AAAA, class = IN
ANSWERS:
->  my.vultr.com
    AAAA IPv6 address = ::17
    ttl = 1 (1 sec)
ADDITIONAL RECORDS:
->  info.portmaster
    text =

    "blocked: denied by rule: domain matches my.vultr.com"
    ttl = 0 (0 secs)

Name: my.vultr.com Addresses: ::17 0.0.0.17

C:\Users****>

=== BELOW THIS LINE FOR VULTR.COM ====

C:\Users****>nslookup -debug vultr.com 127.0.0.1

Got answer: HEADER: opcode = QUERY, id = 1, rcode = NXDOMAIN header flags: response, want recursion questions = 1, answers = 0, authority records = 0, additional = 1

QUESTIONS:
    1.0.0.127.in-addr.arpa, type = PTR, class = IN
ADDITIONAL RECORDS:
->  info.portmaster
    text =

    "no answer found (NXDomain)"
    ttl = 0 (0 secs)

Server: UnKnown Address: 127.0.0.1


Got answer: HEADER: opcode = QUERY, id = 2, rcode = NOERROR header flags: response, want recursion questions = 1, answers = 1, authority records = 0, additional = 4

QUESTIONS:
    vultr.com, type = A, class = IN
ANSWERS:
->  vultr.com
    internet address = 108.61.13.174
    ttl = 17 (17 secs)
ADDITIONAL RECORDS:
->  (root)
    ??? unknown type 41 ???
    ttl = 17 (17 secs)
->  info.portmaster
    text =

    "accepted: allowing dns request"
    ttl = 0 (0 secs)
->  info.portmaster
    text =

    "freshly resolved by DNS-***-Laptop (dot://45.***.***.***:853#config)"
    ttl = 0 (0 secs)
->  info.portmaster
    text =

    "record valid for 1m0s"
    ttl = 0 (0 secs)

Non-authoritative answer:

Got answer: HEADER: opcode = QUERY, id = 3, rcode = NOERROR header flags: response, want recursion questions = 1, answers = 1, authority records = 0, additional = 4

QUESTIONS:
    vultr.com, type = AAAA, class = IN
ANSWERS:
->  vultr.com
    AAAA IPv6 address = 2001:19f0:200:4d1e::5663
    ttl = 17 (17 secs)
ADDITIONAL RECORDS:
->  (root)
    ??? unknown type 41 ???
    ttl = 17 (17 secs)
->  info.portmaster
    text =

    "accepted: allowing dns request"
    ttl = 0 (0 secs)
->  info.portmaster
    text =

    "freshly resolved by DNS-***-Laptop (dot://45.***.***.***:853#config)"
    ttl = 0 (0 secs)
->  info.portmaster
    text =

    "record valid for 1m0s"
    ttl = 0 (0 secs)

Name: vultr.com Addresses: 2001:19f0:200:4d1e::5663 108.61.13.174

C:\Users****>

dhaavi commented 2 years ago

Hey @racrbmr, thanks for reporting this and digging into this.

If I understand correctly, the nslookup queries were handled correctly, so there is an issue with the browser getting past the rules, correct? This can be the case when IP addresses are shared among multiple domain names and the browser has cached my.vultr.com.

Can you check in the Portmaster UI what domain it reports for the connection to my.vultr.com? The thing with domains is that they are not so easy to match to the connection. You can read about this in more detail here.

racrbmr commented 2 years ago

Thanks for answering,

"what domain it reports for the connection to my.vultr.com?" You mean scope?

"You can read about this in more detail here." I have read it, it such difficult process I think.

by the way, Is "Encrypted" section on Connections detail always return: "0%", so my connections is not encrypted even when it is using port 443? I sent the picture attachment.

I'm sorry for the thing I do not know, I'm new user for Portmaster but because I really like and love the application I need to care Portmaster too. REALLY it's future of standalone firewall for me, great UI/UX and the functions and features is really useful for me especially when you can block IP by ASN. And I hope Portmaster have simple connection logs displayed in real-time in the dashboard and which domain/ip is blocked from which app so I don't have to click this then click that to view the connections (of course this still needed for detail purposes) And also can be exported. I hope this will be free for ever and did not get abandoned. While opening donation. I wish I can donate :( .

Thanks.

FMyMSoxHRE

Js8TEktuAO

dhaavi commented 2 years ago

You mean scope?

I'm not sure what you mean by "scope".

I have read it, it such difficult process I think.

Yes, it is difficult.

"Encrypted" section on Connections detail always return: "0%", so my connections is not encrypted even when it is using port 443?

We unfortunately added that the field to the UI before the backend actually used it. It works in v0.7.8 (currently in the Beta Release Channel)

I'm sorry for the thing I do not know, I'm new user for Portmaster

No worries.

I really like and love the application I need to care Portmaster too. REALLY it's future of standalone firewall for me, great UI/UX and the functions and features is really useful for me especially when you can block IP by ASN.

Great you like it!

And I hope Portmaster have simple connection logs displayed in real-time in the dashboard and which domain/ip is blocked from which app so I don't have to click this then click that to view the connections (of course this still needed for detail purposes)

This is planned, but will take a while.

And also can be exported.

We will have a connection history system in the future, that will be able to generate statistics and export data.

I hope this will be free for ever and did not get abandoned. While opening donation. I wish I can donate :( .

Portmaster is free forever and development is paid by the SPN. If you want to support us, you can simply buy the SPN! -> https://safing.io/spn/

github-actions[bot] commented 2 years ago

Auto-closing this issue after waiting for input for a month. If anyone finds the time to provide the requested information, please re-open the issue and we will continue handling it.