portmaster icon indicating copy to clipboard operation
portmaster copied to clipboard

DNS intermittently failing on all requests

Open Terrance opened this issue 1 month ago • 3 comments

Pre-Submit Checklist:

What happened:

At seemingly random intervals, DNS stops working for up to a minute, and non-cached requests appear to time out.

Having reduced config to a single known-working DNS server, the dashboard status changes to Insecure for a few seconds while playing up.

In the logs is a lot of this:

WRN er/resolve:467 > 992 resolver: query to dns://172.16.1.1:53#config failed: dial udp :63958->172.16.1.1:53: bind: An attempt was made to access a socket in a way forbidden by its access permissions.

What did you expect to happen?:

DNS to resolve domains as normal.

How did you reproduce it?:

No explicit actions.

Debug Information:

Version 2.0.25:

Portmaster 2.0.25

built with go1.24.7 (gc -cgo) for windows/amd64
  at 2025-09-05T09:10:26Z

commit a66544959c689599ab118b34ffd94ea261aa86c9 (clean)
  at 2025-09-05T08:17:28Z
  from https://github.com/safing/portmaster.git

Licensed under the GPLv3 license.

Platform: Microsoft Windows 10 Pro 10.0.19045 Build 19045:

System: Microsoft Windows 10 Pro windows (Standalone Workstation) 10.0.19045 Build 19045
Kernel: 10.0.19045 Build 19045 x86_64

Unexpected Logs:

2025-11-11 22:07:10.035 WRN er/resolve:467 > 992 resolver: query to dns://172.16.1.1:53#config failed: dial udp :63958->172.16.1.1:53: bind: An attempt was made to access a socket in a way forbidden by its access permissions.
2025-11-11 22:07:10.035 WRN er/resolve:317 > 995 resolver: async query for 1.example.com.A failed: all 1 query-compliant resolvers failed, last error: dial udp :63958->172.16.1.1:53: bind: An attempt was made to access a socket in a way forbidden by its access permissions.
2025-11-11 22:07:10.425 WRN er/resolve:467 > 090 resolver: query to dns://172.16.1.1:53#config failed: dial udp :63145->172.16.1.1:53: bind: An attempt was made to access a socket in a way forbidden by its access permissions.
2025-11-11 22:07:10.425 WRN er/resolve:317 > 092 resolver: async query for 2.example.com.AAAA failed: all 1 query-compliant resolvers failed, last error: dial udp :63145->172.16.1.1:53: bind: An attempt was made to access a socket in a way forbidden by its access permissions.
2025-11-11 22:07:25.940 WRN er/resolve:467 > 369 resolver: query to dns://172.16.1.1:53#config failed: dial udp :56993->172.16.1.1:53: bind: An attempt was made to access a socket in a way forbidden by its access permissions.
2025-11-11 22:07:25.940 WRN nameserver:296 > 371 nameserver: failed to resolve 3.example.com.A: all 1 query-compliant resolvers failed, last error: dial udp :56993->172.16.1.1:53: bind: An attempt was made to access a socket in a way forbidden by its access permissions.
2025-11-11 22:07:26.566 WRN er/resolve:317 > 380 resolver: async query for 4.example.com.A failed: all 1 query-compliant resolvers failed, last error: record could not be found
2025-11-11 22:07:26.577 WRN er/resolve:317 > 385 resolver: async query for 4.example.com.AAAA failed: all 1 query-compliant resolvers failed, last error: record could not be found
2025-11-11 22:07:29.393 WRN er/resolve:317 > 406 resolver: async query for 4.example.com.A failed: all 1 query-compliant resolvers failed, last error: record could not be found
2025-11-11 22:07:29.393 WRN er/resolve:317 > 409 resolver: async query for 4.example.com.AAAA failed: all 1 query-compliant resolvers failed, last error: record could not be found
251111 22:07:38.183 CURRENT TIME

Status: Online:

OnlineStatus:          Online
CaptivePortal:         

SPN: disabled (module disabled):

HomeHubID:    
HomeHubName:  
HomeHubIP:    
Transport:    
---
Client:       true
PublicHub:    false
HubHasIPv4:   false
HubHasIPv6:   false

Resolvers: 4/4:

Apoc (dns://172.16.1.1:53#config)
  dns://172.16.1.1:53#config
  Failing: false

fe80::32b1:b5ff:fe91:3659 (dns://fe80::32b1:b5ff:fe91:3659:53#system)
  dns://fe80::32b1:b5ff:fe91:3659:53#system
  Search Domains: .home., .home.
  Failing: false

172.16.1.1 (dns://172.16.1.1:53#system)
  dns://172.16.1.1:53#system
  Search Domains: .home., .home.
  Failing: false

172.16.0.1 (dns://172.16.0.1:53#system)
  dns://172.16.0.1:53#system
  Search Domains: .home., .home.
  Failing: false

Config: 11:

core/automaticUpdates: false
core/devMode: true
core/expertiseLevel: developer
dns/nameserverRetryRate: 10
dns/nameservers: [redacted]
dns/noAssignedNameservers: true
dns/useStaleCache: true
filter/askTimeout: 10
filter/defaultAction: ask
filter/endpoints: [redacted]
filter/removeOutOfScopeDNS: false

Updates: stable (17):

Binaries Index: v2.0.25 from 2025-11-08 19:02:50.4022513 +0000 GMT m=+0.072386501
Intel Index: v20250930.11.57 from 2025-09-30 11:57:09.918621973 +0000 UTC

File    Version   Index   SHA256

WebView2Loader.dll    2.0.25           binaries   609c974a8cdd6a76a745b3d81b62f321d79f2dc8f4929e1eea8469d9d78baf79
assets.zip            2.0.25           binaries   8068115b8d9e5c2059032befc22226578d0b7e676f776dab553c692497878752
portmaster-core.dll   2.0.25           binaries   3e5db91a4c48278b6ab7355633306685011edc8c59eadd8c760c499a79f50254
portmaster-core.exe   2.0.25           binaries   341f8bed55657366c3271b6dc369b091fb24a39a445aa7795db3c90810c5a57a
portmaster-kext.sys   2.0.25           binaries   4d72a8b43a4a3f2e2b5598edbd64a28de8c47a4db546607164c5e48c07103329
portmaster.exe        2.0.25           binaries   ed9afffe733992c49ad3e75c5b263c2e0dd5231e600e7bb01c40373b27b1c4f5
portmaster.zip        2.0.25           binaries   0011176f80ba498a87a86ba782bdf7896f3e0289debb53e05b071a177ee96b23
uninstall.exe         2.0.25           binaries   d8c55b2c667beef02d1cf039258af12f25bd9bd407af841609d0d1e686affb81
main-intel.yaml       20250930.11.57   intel      c73be8f0600af4500f5d3e6f8e354f5d96dba2ce37d59aa976306a8ea9e5bc6d
notifications.yaml    20250915.11.11   intel      8168f64860717712a9d0a00da876e84f03c34834b3a8e0e1dfa783a9c29f7235
news.yaml             20250812.8.58    intel      fa64e8d0f2adc61093df516d4be68ad536c4de29fd9f7c2473311dbdaaa1f9c6
index.dsd             2025.4.14        intel      026325cc7af459251fb08dce0a6166aeece4c9b5a4b7d26e15f4f7d94e0e6e0e
base.dsdl             20250901.0.0     intel      e094359579742a66d61761fc57cb6e97a4ef18dfa632e692b9d41fbc0578ff60
intermediate.dsdl     20250831.0.0     intel      fe97067ec790deaf6ac7f911c3c771eb024e2fa75e3d0ad6099e3698a372b9f8
urgent.dsdl           20250831.21.0    intel      fbaacbee9e500ba61450fb5f242c2be52130f32b3dab10271dfb2af45e9db1bf
geoipv4.mmdb          20250623.0.0     intel      1157da35a7c3d791853032f998b60bb778b700a37716150f18619c85196fe5ce
geoipv6.mmdb          20250623.0.0     intel      0fa07fada19f38c9e01925a3682d0d5abaa8298e22203ac43d04ffc1e553dfc9

Compatibility: WFP State (38):

Edge traversal Teredo Authorization Sublayer   SubLayer   Edge traversal Teredo Authorization Sublayer                                  {7b6b11f6-cbb5-433c-ae06-6a4f0076e49e}
IPxlat Forward IPv4 filter                     Callout    Filters forwarded IPv4 packets into synthetic IPv6 packets                    {b255c296-7e0c-4115-95f3-b7f24a8a1162}   [no provider key]   FWPM_LAYER_IPFORWARD_V4
IPxlat Forward IPv4 sub layer                  SubLayer   Sub layer for filtering forwarded IPv4 packets into synthetic IPv6 packets    {4351e497-5d8b-46bc-86d9-abccdb868d6d}
IPxlat Inbound IPv6 filter                     Callout    Filters incoming IPv6 packets into synthetic IPv4 packets                     {93bb703d-0502-42e2-8e30-a14576e5085d}   [no provider key]   FWPM_LAYER_INBOUND_IPPACKET_V6
IPxlat Inbound IPv6 sub layer                  SubLayer   Sub layer for filtering incoming IPv6 packets into synthetic IPv4 packets     {dfb035ca-c2a7-4684-97b6-4dbc57c63590}
IPxlat Outbound IPv4 filter                    Callout    Filters outgoing IPv4 packets into synthetic IPv6 packets                     {66d52657-1979-4e58-b3f7-4756434c4880}   [no provider key]   FWPM_LAYER_OUTBOUND_IPPACKET_V4
IPxlat Outbound IPv4 sub layer                 SubLayer   Sub layer for filtering outgoing IPv4 packets into synthetic IPv6 packets     {d3e70856-fc90-4c0a-b9b2-a6f73e20b5cc}
Portmaster ALE Outbound IPv4                   Callout    Portmaster uses this layer to block/permit outgoing ipv4 connections          {58545073-f893-454c-bbea-a57bc964f46d}   [no provider key]   FWPM_LAYER_ALE_AUTH_CONNECT_V4
Portmaster ALE Outbound IPv4                   Filter     Portmaster uses this layer to block/permit outgoing ipv4 connections          {48b9a96e-3a13-4bf0-a786-0cc7e38ceb70}   [no provider key]   FWPM_LAYER_ALE_AUTH_CONNECT_V4   {7dab1057-8e2b-40c4-9b85-693e381d7896}
Portmaster ALE Outbound IPv6                   Callout    Portmaster uses this layer to block/permit outgoing ipv6 connections          {4bd2a080-2585-478d-977c-7f340c6bc3d4}   [no provider key]   FWPM_LAYER_ALE_AUTH_CONNECT_V6
Portmaster ALE Outbound IPv6                   Filter     Portmaster uses this layer to block/permit outgoing ipv6 connections          {8255c9d3-ba4c-43e2-abb2-8a039a6fc6fb}   [no provider key]   FWPM_LAYER_ALE_AUTH_CONNECT_V6   {7dab1057-8e2b-40c4-9b85-693e381d7896}
Portmaster Datagram IPv4                       Callout    Portmaster uses this layer for bandwidth statistics of IPv4 UDP connections   {e7eeeaba-168a-45bb-8747-e1a702feb2c5}   [no provider key]   FWPM_LAYER_DATAGRAM_DATA_V4
Portmaster Datagram IPv4                       Filter     Portmaster uses this layer for bandwidth statistics of IPv4 UDP connections   {6b09e758-f859-4ce8-a116-3a40812566eb}   [no provider key]   FWPM_LAYER_DATAGRAM_DATA_V4   {7dab1057-8e2b-40c4-9b85-693e381d7896}
Portmaster Datagram IPv6                       Callout    Portmaster uses this layer for bandwidth statistics of IPv6 UDP connections   {b25862cd-f744-4452-b14a-d0c1e5a25b30}   [no provider key]   FWPM_LAYER_DATAGRAM_DATA_V6
Portmaster Datagram IPv6                       Filter     Portmaster uses this layer for bandwidth statistics of IPv6 UDP connections   {c87d4838-c14e-4e37-a86c-0c2abc95fbd0}   [no provider key]   FWPM_LAYER_DATAGRAM_DATA_V6   {7dab1057-8e2b-40c4-9b85-693e381d7896}
Portmaster Endpoint Closure IPv4               Callout    Portmaster uses this layer to detect when a IPv4 connection has ended         {58f02845-ace9-4455-ac80-8a84b86fe566}   [no provider key]   FWPM_LAYER_ALE_ENDPOINT_CLOSURE_V4
Portmaster Endpoint Closure IPv4               Filter     Portmaster uses this layer to detect when a IPv4 connection has ended         {9968c184-343b-4e4a-b69d-79db612e01a0}   [no provider key]   FWPM_LAYER_ALE_ENDPOINT_CLOSURE_V4   {7dab1057-8e2b-40c4-9b85-693e381d7896}
Portmaster Endpoint Closure IPv6               Callout    Portmaster uses this layer to detect when a IPv6 connection has ended         {2bc82359-9dc5-4315-9c93-c89467e283ce}   [no provider key]   FWPM_LAYER_ALE_ENDPOINT_CLOSURE_V6
Portmaster Endpoint Closure IPv6               Filter     Portmaster uses this layer to detect when a IPv6 connection has ended         {ea063452-b06b-4e5c-8d4a-ba6cb0247695}   [no provider key]   FWPM_LAYER_ALE_ENDPOINT_CLOSURE_V6   {7dab1057-8e2b-40c4-9b85-693e381d7896}
Portmaster Packet Inbound IPv4                 Callout    Portmaster uses this layer to redirect/block/permit inbound ipv4 packets      {f0369374-203d-4bf0-83d2-b2ad3cc17a50}   [no provider key]   FWPM_LAYER_INBOUND_IPPACKET_V4
Portmaster Packet Inbound IPv4                 Filter     Portmaster uses this layer to redirect/block/permit inbound ipv4 packets      {8a077199-db48-432e-944d-ec4792fc2cdf}   [no provider key]   FWPM_LAYER_INBOUND_IPPACKET_V4   {7dab1057-8e2b-40c4-9b85-693e381d7896}
Portmaster Packet Inbound IPv6                 Callout    Portmaster uses this layer to redirect/block/permit inbound ipv6 packets      {fe9faf5f-ceb2-4cd9-9995-f2f2b4f5fcc0}   [no provider key]   FWPM_LAYER_INBOUND_IPPACKET_V6
Portmaster Packet Inbound IPv6                 Filter     Portmaster uses this layer to redirect/block/permit inbound ipv6 packets      {b3f8b6de-beee-4300-8827-00a0b4484cdd}   [no provider key]   FWPM_LAYER_INBOUND_IPPACKET_V6   {7dab1057-8e2b-40c4-9b85-693e381d7896}
Portmaster Packet Outbound IPv4                Callout    Portmaster uses this layer to redirect/block/permit outgoing ipv4 packets     {f3183afe-dc35-49f1-8ea2-b16b5666dd36}   [no provider key]   FWPM_LAYER_OUTBOUND_IPPACKET_V4
Portmaster Packet Outbound IPv4                Filter     Portmaster uses this layer to redirect/block/permit outgoing ipv4 packets     {a64c7879-6f7d-4408-96db-f17755be0473}   [no provider key]   FWPM_LAYER_OUTBOUND_IPPACKET_V4   {7dab1057-8e2b-40c4-9b85-693e381d7896}
Portmaster Packet Outbound IPv6                Callout    Portmaster uses this layer to redirect/block/permit outgoing ipv6 packets     {91daf8bc-0908-4bf8-9f81-2c538ab8f25a}   [no provider key]   FWPM_LAYER_OUTBOUND_IPPACKET_V6
Portmaster Packet Outbound IPv6                Filter     Portmaster uses this layer to redirect/block/permit outgoing ipv6 packets     {cf9670ac-0493-466a-b52c-4a58e111c513}   [no provider key]   FWPM_LAYER_OUTBOUND_IPPACKET_V6   {7dab1057-8e2b-40c4-9b85-693e381d7896}
Portmaster Stream IPv4                         Callout    Portmaster uses this layer for bandwidth statistics of IPv4 TCP connections   {e2ca13bf-9710-4caa-a45c-e8c78b5ac780}   [no provider key]   FWPM_LAYER_STREAM_V4
Portmaster Stream IPv4                         Filter     Portmaster uses this layer for bandwidth statistics of IPv4 TCP connections   {38e37d21-805a-4ac9-8862-ed433d9c0cdf}   [no provider key]   FWPM_LAYER_STREAM_V4   {7dab1057-8e2b-40c4-9b85-693e381d7896}
Portmaster Stream IPv6                         Callout    Portmaster uses this layer for bandwidth statistics of IPv6 TCP connections   {66c549b3-11e2-4b27-8f73-856e6fd82baa}   [no provider key]   FWPM_LAYER_STREAM_V6
Portmaster Stream IPv6                         Filter     Portmaster uses this layer for bandwidth statistics of IPv6 TCP connections   {75b7fc3e-906c-4ae4-a110-522ba9baf6fb}   [no provider key]   FWPM_LAYER_STREAM_V6   {7dab1057-8e2b-40c4-9b85-693e381d7896}
Portmaster resource release IPv4               Callout    Portmaster uses this layer to detect when a IPv4 port has been released       {7b513bb3-a0be-4f77-a4bc-03c052abe8d7}   [no provider key]   FWPM_LAYER_ALE_RESOURCE_RELEASE_V4
Portmaster resource release IPv4               Filter     Portmaster uses this layer to detect when a IPv4 port has been released       {70b1371e-d9df-4a84-94c2-ea2c22255ddc}   [no provider key]   FWPM_LAYER_ALE_RESOURCE_RELEASE_V4   {7dab1057-8e2b-40c4-9b85-693e381d7896}
Portmaster resource release IPv6               Callout    Portmaster uses this layer to detect when a IPv6 port has been released       {6cf36e04-e656-42c3-8cac-a1ce05328bd1}   [no provider key]   FWPM_LAYER_ALE_RESOURCE_RELEASE_V6
Portmaster resource release IPv6               Filter     Portmaster uses this layer to detect when a IPv6 port has been released       {b7d1c87c-f3a6-4f79-87ef-d8fc34cf54b6}   [no provider key]   FWPM_LAYER_ALE_RESOURCE_RELEASE_V6   {7dab1057-8e2b-40c4-9b85-693e381d7896}
PortmasterSublayer                             SubLayer   The Portmaster sublayer holds all it's filters.                               {7dab1057-8e2b-40c4-9b85-693e381d7896}
Teredo socket option opt out block filter      Filter     [no description]                                                              {a28667b6-4553-42aa-8297-5ea9bcc7961f}   {977de843-e50e-4371-a702-c47f1f3da919}   FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V6   {7b6b11f6-cbb5-433c-ae06-6a4f0076e49e}
VPN Reconnect Sublayer                         SubLayer   [no description]                                                              {9367171b-3264-4f09-a0e8-81b38c162f17}

Worker Status: 3/54 (0?):

54 Workers: 3 running, 54 waiting

#   State          Module           Name                                 Worker Func                                                                                      Current Line                                                                             Extra Info
1   running        API              http request                         github.com/safing/portmaster/base/api.(*mainHandler).ServeHTTP.func1                             github.com/safing/portmaster/service/debug.go:58                                         
1   syscall        DNSMonitor       etw-dns-event-listener               github.com/safing/portmaster/service/firewall/interception/dnsmonitor.initializeSessions.func1   github.com/safing/portmaster/service/integration/etw_windows.go:73                       
1   syscall        Interception     kext packet handler                  github.com/safing/portmaster/service/firewall/interception.startInterception.func3               github.com/safing/portmaster/windows_kext/kextinterface/kext_file.go:61                  
1   chan receive   Resolver         mdns handler                         github.com/safing/portmaster/service/resolver.listenToMDNS                                       github.com/safing/portmaster/service/resolver/resolver-mdns.go:147                       
2   select         API              database api writer                  github.com/safing/portmaster/base/api.(*DatabaseWebsocketAPI).writer                             github.com/safing/portmaster/base/api/database.go:155                                    
2   select         Rng              feeder                               github.com/safing/portmaster/base/rng.(*Feeder).run                                              github.com/safing/portmaster/base/rng/entropy.go:117                                     
1   select         Firewall         bandwidth update handler             github.com/safing/portmaster/service/firewall.bandwidthUpdateHandler                             github.com/safing/portmaster/service/firewall/packet_handler.go:838                      
1   select         Firewall         packet handler                       github.com/safing/portmaster/service/firewall.packetHandler                                      github.com/safing/portmaster/service/firewall/packet_handler.go:823                      
1   select         Interception     kext bandwidth request worker        github.com/safing/portmaster/service/firewall/interception.startInterception.func4               github.com/safing/portmaster/service/firewall/interception/interception_windows.go:70    
1   select         Interception     kext clean ended connection worker   github.com/safing/portmaster/service/firewall/interception.startInterception.func6               github.com/safing/portmaster/service/firewall/interception/interception_windows.go:103   
1   select         Interception     kext log request worker              github.com/safing/portmaster/service/firewall/interception.startInterception.func5               github.com/safing/portmaster/service/firewall/interception/interception_windows.go:87    
1   select         NetEnv           monitor network changes              github.com/safing/portmaster/service/netenv.monitorNetworkChanges                                github.com/safing/portmaster/service/netenv/network-change.go:52                         
1   select         NetEnv           monitor online status                github.com/safing/portmaster/service/netenv.monitorOnlineStatus                                  github.com/safing/portmaster/service/netenv/online-status.go:363                         
1   select         NetQuery         netquery connection feed handler     github.com/safing/portmaster/service/netquery.(*NetQuery).Start.func2                            github.com/safing/portmaster/service/netquery/manager.go:101                             
1   select         NetQuery         netquery connection feed listener    github.com/safing/portmaster/service/netquery.(*NetQuery).Start.func1                            github.com/safing/portmaster/service/netquery/module_api.go:194                          
1   select         NetQuery         netquery live db cleaner             github.com/safing/portmaster/service/netquery.(*NetQuery).Start.func3                            github.com/safing/portmaster/service/netquery/module_api.go:221                          
1   select         Network          clean connections                    github.com/safing/portmaster/service/network.connectionCleaner                                   github.com/safing/portmaster/service/network/clean.go:39                                 
1   select         Network          write open dns requests              github.com/safing/portmaster/service/network.openDNSRequestWriter                                github.com/safing/portmaster/service/network/dns.go:182                                  
1   select         Notifications    cleaner                              github.com/safing/portmaster/base/notifications.cleaner                                          github.com/safing/portmaster/base/notifications/cleaner.go:14                            
1   select         Profile          clean active profiles                github.com/safing/portmaster/service/profile.cleanActiveProfiles                                 github.com/safing/portmaster/service/profile/active.go:59                                
1   select         Profile          update active profiles               github.com/safing/portmaster/service/profile.start.startProfileUpdateChecker.func1               github.com/safing/portmaster/service/profile/database.go:57                              
1   select         Resolver         ip info delayed cache writer         github.com/safing/portmaster/base/database.(*Interface).DelayedCacheWriter                       github.com/safing/portmaster/base/database/interface_cache.go:34                         
1   select         Resolver         mdns message handler                 github.com/safing/portmaster/service/resolver.listenToMDNS.func9                                 github.com/safing/portmaster/service/resolver/resolver-mdns.go:153                       
1   select         Resolver         name record delayed cache writer     github.com/safing/portmaster/base/database.(*Interface).DelayedCacheWriter                       github.com/safing/portmaster/base/database/interface_cache.go:34                         
1   select         Rng              full feeder                          github.com/safing/portmaster/base/rng.fullFeeder                                                 github.com/safing/portmaster/base/rng/fullfeed.go:25                                     
1   select         Rng              os rng feeder                        github.com/safing/portmaster/base/rng.osFeeder                                                   github.com/safing/portmaster/base/rng/osfeeder.go:27                                     
1   select         Rng              tick rng feeder                      github.com/safing/portmaster/base/rng.tickFeeder                                                 github.com/safing/portmaster/base/rng/tickfeeder.go:63                                   
1   select         Status           status publisher                     github.com/safing/portmaster/service/status.(*Status).statusPublisher                            github.com/safing/portmaster/service/status/status.go:55                                 
1   select         geoip            geoip-updater                        github.com/safing/portmaster/service/intel/geoip.(*updateWorker).run                             github.com/safing/portmaster/service/intel/geoip/database.go:197                         
2   IO wait        API              database api handler                 github.com/safing/portmaster/base/api.(*DatabaseWebsocketAPI).handler                            github.com/safing/portmaster/base/api/database.go:137                                    
1   IO wait        API              http server                          github.com/safing/portmaster/base/api.serverManager.func1                                        github.com/safing/portmaster/base/api/router.go:92                                       
1   IO wait        API              http server manager                  github.com/safing/portmaster/base/api.serverManager                                              github.com/safing/portmaster/base/api/router.go:92                                       
1   IO wait        NameServer       dns resolver                         github.com/safing/portmaster/service/nameserver.start.startListener.func4                        github.com/safing/portmaster/service/nameserver/module.go:156                            
1   IO wait        Resolver         mdns udp4 multicast listener         github.com/safing/portmaster/service/resolver.listenToMDNS.func1                                 github.com/safing/portmaster/service/resolver/resolver-mdns.go:343                       
1   IO wait        Resolver         mdns udp4 unicast listener           github.com/safing/portmaster/service/resolver.listenToMDNS.func3                                 github.com/safing/portmaster/service/resolver/resolver-mdns.go:343                       
1   IO wait        Resolver         mdns udp6 unicast listener           github.com/safing/portmaster/service/resolver.listenToMDNS.func7                                 github.com/safing/portmaster/service/resolver/resolver-mdns.go:343                       
1   scheduled      API              clean api sessions                   github.com/safing/portmaster/base/api.cleanSessions                                                                                                                                       repeated every 5m0s
1   scheduled      Access           update account                       github.com/safing/portmaster/spn/access.UpdateAccount                                                                                                                                     delayed
1   scheduled      Binary Updater   update checker                       github.com/safing/portmaster/service/updates.(*Updater).updateCheckWorker                                                                                                                 on demand
1   scheduled      Binary Updater   upgrader                             github.com/safing/portmaster/service/updates.(*Updater).upgradeWorker                                                                                                                     created
1   scheduled      Broadcasts       broadcast notifier                   github.com/safing/portmaster/service/broadcasts.broadcastNotify                                                                                                                           repeated every 10m0s
1   scheduled      Captain          maintain public identity             github.com/safing/portmaster/spn/captain.maintainPublicIdentity                                                                                                                           created
1   scheduled      Captain          maintain public status               github.com/safing/portmaster/spn/captain.maintainPublicStatus                                                                                                                             created
1   scheduled      Compat           clean notify thresholds              github.com/safing/portmaster/service/compat.cleanNotifyThreshold                                                                                                                          repeated every 1h0m0s
1   scheduled      Compat           compatibility self-check             github.com/safing/portmaster/service/compat.selfcheckTaskFunc                                                                                                                             repeated every 5m0s
1   scheduled      CustomList       update custom filter list            github.com/safing/portmaster/service/intel/customlists.New.func1                                                                                                                          repeated every 1m0s
1   scheduled      DBModule         basic maintenance                    github.com/safing/portmaster/base/database/dbmodule.maintainBasic                                                                                                                         repeated every 10m0s
1   scheduled      DBModule         record maintenance                   github.com/safing/portmaster/base/database/dbmodule.maintainRecords                                                                                                                       repeated every 1h0m0s
1   scheduled      DBModule         thorough maintenance                 github.com/safing/portmaster/base/database/dbmodule.maintainThorough                                                                                                                      repeated every 1h0m0s
1   scheduled      Intel Updater    update checker                       github.com/safing/portmaster/service/updates.(*Updater).updateCheckWorker                                                                                                                 repeated every 1h0m0s
1   scheduled      Intel Updater    upgrader                             github.com/safing/portmaster/service/updates.(*Updater).upgradeWorker                                                                                                                     created
1   scheduled      NetQuery         network history cleaner delay        github.com/safing/portmaster/service/netquery.(*NetQuery).Start.func4                                                                                                                     repeated every 1h0m0s
1   scheduled      Resolver         check failing resolvers              github.com/safing/portmaster/service/resolver.checkFailingResolvers                                                                                                                       delayed
1   scheduled      Resolver         suggest using stale cache            github.com/safing/portmaster/service/resolver.suggestUsingStaleCacheTask                                                                                                                  on demand

Goroutine Stack:

goroutine profile: total 104
32 @ 0xc864e 0xa9137 0x5d2945 0x5d2f13 0xd0681
#	0x5d2944	github.com/safing/portmaster/base/api.(*DatabaseAPI).processSub+0x224	/go-workdir/base/api/database.go:449
#	0x5d2f12	github.com/safing/portmaster/base/api.(*DatabaseAPI).handleQsub+0xd2	/go-workdir/base/api/database.go:512

14 @ 0xc864e 0xa9137 0x57b6a5 0xd0681
#	0x57b6a4	github.com/safing/portmaster/service/mgr.(*WorkerMgr).taskMgr+0x284	/go-workdir/service/mgr/workermgr.go:180

6 @ 0xc864e 0x8d6b7 0xc77e5 0x157627 0x158a85 0x15975b 0x1cf925 0x1e62a5 0x3d53f9 0x1feec3 0x1feff3 0x3db1e5 0xd0681
#	0xc77e4		internal/poll.runtime_pollWait+0x84	/usr/local/go/src/runtime/netpoll.go:351
#	0x157626	internal/poll.(*pollDesc).wait+0x26	/usr/local/go/src/internal/poll/fd_poll_runtime.go:84
#	0x158a84	internal/poll.execIO+0x104		/usr/local/go/src/internal/poll/fd_windows.go:177
#	0x15975a	internal/poll.(*FD).Read+0x29a		/usr/local/go/src/internal/poll/fd_windows.go:438
#	0x1cf924	net.(*netFD).Read+0x24			/usr/local/go/src/net/fd_posix.go:55
#	0x1e62a4	net.(*conn).Read+0x44			/usr/local/go/src/net/net.go:194
#	0x3d53f8	net/http.(*connReader).Read+0x158	/usr/local/go/src/net/http/server.go:798
#	0x1feec2	bufio.(*Reader).fill+0x102		/usr/local/go/src/bufio/bufio.go:113
#	0x1feff2	bufio.(*Reader).Peek+0x52		/usr/local/go/src/bufio/bufio.go:152
#	0x3db1e4	net/http.(*conn).serve+0x784		/usr/local/go/src/net/http/server.go:2137

4 @ 0xc864e 0xa9137 0x57b575 0xd0681
#	0x57b574	github.com/safing/portmaster/service/mgr.(*WorkerMgr).taskMgr+0x154	/go-workdir/service/mgr/workermgr.go:151

3 @ 0xc864e 0xa9137 0x5d2945 0x5d2588 0xd0681
#	0x5d2944	github.com/safing/portmaster/base/api.(*DatabaseAPI).processSub+0x224	/go-workdir/base/api/database.go:449
#	0x5d2587	github.com/safing/portmaster/base/api.(*DatabaseAPI).handleSub+0x87	/go-workdir/base/api/database.go:421

2 @ 0xc864e 0x8d6b7 0xc77e5 0x157627 0x158a85 0x15975b 0x1cf925 0x1e62a5 0x1feec3 0x1feff3 0x5baf65 0x5bcf4d 0x5bde2d 0x5be493 0x5d0165 0x578066 0x577332 0xd0681
#	0xc77e4		internal/poll.runtime_pollWait+0x84						/usr/local/go/src/runtime/netpoll.go:351
#	0x157626	internal/poll.(*pollDesc).wait+0x26						/usr/local/go/src/internal/poll/fd_poll_runtime.go:84
#	0x158a84	internal/poll.execIO+0x104							/usr/local/go/src/internal/poll/fd_windows.go:177
#	0x15975a	internal/poll.(*FD).Read+0x29a							/usr/local/go/src/internal/poll/fd_windows.go:438
#	0x1cf924	net.(*netFD).Read+0x24								/usr/local/go/src/net/fd_posix.go:55
#	0x1e62a4	net.(*conn).Read+0x44								/usr/local/go/src/net/net.go:194
#	0x1feec2	bufio.(*Reader).fill+0x102							/usr/local/go/src/bufio/bufio.go:113
#	0x1feff2	bufio.(*Reader).Peek+0x52							/usr/local/go/src/bufio/bufio.go:152
#	0x5baf64	github.com/gorilla/websocket.(*Conn).read+0x24					/.go-mod-cache/github.com/gorilla/[email protected]/conn.go:371
#	0x5bcf4c	github.com/gorilla/websocket.(*Conn).advanceFrame+0x6c				/.go-mod-cache/github.com/gorilla/[email protected]/conn.go:809
#	0x5bde2c	github.com/gorilla/websocket.(*Conn).NextReader+0xac				/.go-mod-cache/github.com/gorilla/[email protected]/conn.go:1009
#	0x5be492	github.com/gorilla/websocket.(*Conn).ReadMessage+0x12				/.go-mod-cache/github.com/gorilla/[email protected]/conn.go:1093
#	0x5d0164	github.com/safing/portmaster/base/api.(*DatabaseWebsocketAPI).handler+0x64	/go-workdir/base/api/database.go:137
#	0x578065	github.com/safing/portmaster/service/mgr.(*Manager).runWorker+0xe5		/go-workdir/service/mgr/worker.go:354
#	0x577331	github.com/safing/portmaster/service/mgr.(*Manager).manageWorker+0x1f1		/go-workdir/service/mgr/worker.go:188

2 @ 0xc864e 0xa9137 0x585145 0x578066 0x577332 0xd0681
#	0x585144	github.com/safing/portmaster/base/database.(*Interface).DelayedCacheWriter+0x144	/go-workdir/base/database/interface_cache.go:34
#	0x578065	github.com/safing/portmaster/service/mgr.(*Manager).runWorker+0xe5			/go-workdir/service/mgr/worker.go:354
#	0x577331	github.com/safing/portmaster/service/mgr.(*Manager).manageWorker+0x1f1			/go-workdir/service/mgr/worker.go:188

2 @ 0xc864e 0xa9137 0x5b76be 0x578066 0x577332 0xd0681
#	0x5b76bd	github.com/safing/portmaster/base/rng.(*Feeder).run+0x13d		/go-workdir/base/rng/entropy.go:117
#	0x578065	github.com/safing/portmaster/service/mgr.(*Manager).runWorker+0xe5	/go-workdir/service/mgr/worker.go:354
#	0x577331	github.com/safing/portmaster/service/mgr.(*Manager).manageWorker+0x1f1	/go-workdir/service/mgr/worker.go:188

2 @ 0xc864e 0xa9137 0x5d032c 0x578066 0x577332 0xd0681
#	0x5d032b	github.com/safing/portmaster/base/api.(*DatabaseWebsocketAPI).writer+0x10b	/go-workdir/base/api/database.go:155
#	0x578065	github.com/safing/portmaster/service/mgr.(*Manager).runWorker+0xe5		/go-workdir/service/mgr/worker.go:354
#	0x577331	github.com/safing/portmaster/service/mgr.(*Manager).manageWorker+0x1f1		/go-workdir/service/mgr/worker.go:188

1 @ 0x67891 0xc9fe9 0xcdfc93 0xd0681
#	0xc9fe8		os/signal.signal_recv+0x28	/usr/local/go/src/runtime/sigqueue.go:152
#	0xcdfc92	os/signal.loop+0x12		/usr/local/go/src/os/signal/signal_unix.go:23

1 @ 0x89fb1 0xc745d 0x58b4f1 0x58b325 0x58814b 0x59f6bb 0xc9efde 0x5d5e9a 0x5d5585 0x5da893 0x5d94a5 0x578066 0x577c6a 0x5d9438 0x5d93a7 0x3fc26e 0x3db085 0xd0681
#	0x58b4f0	runtime/pprof.writeRuntimeProfile+0xb0						/usr/local/go/src/runtime/pprof/pprof.go:796
#	0x58b324	runtime/pprof.writeGoroutine+0x44						/usr/local/go/src/runtime/pprof/pprof.go:755
#	0x58814a	runtime/pprof.(*Profile).WriteTo+0x14a						/usr/local/go/src/runtime/pprof/pprof.go:377
#	0x59f6ba	github.com/safing/portmaster/base/utils/debug.(*Info).AddGoroutineStack+0x5a	/go-workdir/base/utils/debug/debug.go:95
#	0xc9efdd	github.com/safing/portmaster/service/core.debugInfo+0x13d			/go-workdir/service/core/api.go:324
#	0x5d5e99	github.com/safing/portmaster/base/api.(*Endpoint).ServeHTTP+0x899		/go-workdir/base/api/endpoints.go:447
#	0x5d5584	github.com/safing/portmaster/base/api.(*endpointHandler).ServeHTTP+0x44		/go-workdir/base/api/endpoints.go:366
#	0x5da892	github.com/safing/portmaster/base/api.(*mainHandler).handle+0x13d2		/go-workdir/base/api/router.go:304
#	0x5d94a4	github.com/safing/portmaster/base/api.(*mainHandler).ServeHTTP.func1+0x24	/go-workdir/base/api/router.go:114
#	0x578065	github.com/safing/portmaster/service/mgr.(*Manager).runWorker+0xe5		/go-workdir/service/mgr/worker.go:354
#	0x577c69	github.com/safing/portmaster/service/mgr.(*Manager).do+0x1e9			/go-workdir/service/mgr/worker.go:286
#	0x5d9437	github.com/safing/portmaster/service/mgr.(*Manager).Do+0xb7			/go-workdir/service/mgr/worker.go:259
#	0x5d93a6	github.com/safing/portmaster/base/api.(*mainHandler).ServeHTTP+0x26		/go-workdir/base/api/router.go:113
#	0x3fc26d	net/http.serverHandler.ServeHTTP+0x8d						/usr/local/go/src/net/http/server.go:3301
#	0x3db084	net/http.(*conn).serve+0x624							/usr/local/go/src/net/http/server.go:2102

1 @ 0xc51de 0xb384e 0xcc4a9 0x44f53e 0xbd740c 0xbd922d 0xbd91d3 0x578066 0x577332 0xd0681
#	0xcc4a8		syscall.Syscall+0x28											/usr/local/go/src/runtime/syscall_windows.go:457
#	0x44f53d	golang.org/x/sys/windows.(*Proc).Call+0x9d								/.go-mod-cache/golang.org/x/[email protected]/windows/dll_windows.go:170
#	0xbd740b	github.com/safing/portmaster/service/integration.ETWFunctions.StartTrace+0x6b				/go-workdir/service/integration/etw_windows.go:73
#	0xbd922c	github.com/safing/portmaster/service/firewall/interception/dnsmonitor.(*ETWSession).StartTrace+0x6c	/go-workdir/service/firewall/interception/dnsmonitor/etwlink_windows.go:61
#	0xbd91d2	github.com/safing/portmaster/service/firewall/interception/dnsmonitor.initializeSessions.func1+0x12	/go-workdir/service/firewall/interception/dnsmonitor/eventlistener_windows.go:51
#	0x578065	github.com/safing/portmaster/service/mgr.(*Manager).runWorker+0xe5					/go-workdir/service/mgr/worker.go:354
#	0x577331	github.com/safing/portmaster/service/mgr.(*Manager).manageWorker+0x1f1					/go-workdir/service/mgr/worker.go:188

1 @ 0xc51de 0xb384e 0xcc4a9 0x451d4f 0xce0828 0xce1573 0xce1277 0xd0681
#	0xcc4a8		syscall.Syscall+0x28								/usr/local/go/src/runtime/syscall_windows.go:457
#	0x451d4e	golang.org/x/sys/windows.StartServiceCtrlDispatcher+0x4e			/.go-mod-cache/golang.org/x/[email protected]/windows/zsyscall_windows.go:1379
#	0xce0827	golang.org/x/sys/windows/svc.Run+0x107						/.go-mod-cache/golang.org/x/[email protected]/windows/svc/service.go:300
#	0xce1572	github.com/safing/portmaster/cmds/cmdbase.(*WindowsSystemService).Run+0x152	/go-workdir/cmds/cmdbase/service_windows.go:49
#	0xce1276	github.com/safing/portmaster/cmds/cmdbase.RunService.func1+0x16			/go-workdir/cmds/cmdbase/service.go:109

1 @ 0xc51de 0xb384e 0xcc4f8 0x45384b 0xcb708c 0xcb706c 0xcb6eab 0x11c7f1 0x19bbe5 0x19bbe6 0xcb2738 0xcb3107 0xcb7945 0xcb7935 0xcb9d69 0x578066 0x577332 0xd0681
#	0xcc4f7		syscall.Syscall6+0x37										/usr/local/go/src/runtime/syscall_windows.go:463
#	0x45384a	golang.org/x/sys/windows.readFile+0x8a								/.go-mod-cache/golang.org/x/[email protected]/windows/zsyscall_windows.go:3039
#	0xcb708b	golang.org/x/sys/windows.ReadFile+0x4b								/.go-mod-cache/golang.org/x/[email protected]/windows/syscall_windows.go:598
#	0xcb706b	github.com/safing/portmaster/windows_kext/kextinterface.(*KextFile).refill_read_buffer+0x2b	/go-workdir/windows_kext/kextinterface/kext_file.go:61
#	0xcb6eaa	github.com/safing/portmaster/windows_kext/kextinterface.(*KextFile).Read+0x8a			/go-workdir/windows_kext/kextinterface/kext_file.go:29
#	0x11c7f0	io.ReadAtLeast+0x90										/usr/local/go/src/io/io.go:335
#	0x19bbe4	io.ReadFull+0xa4										/usr/local/go/src/io/io.go:354
#	0x19bbe5	encoding/binary.Read+0xa5									/usr/local/go/src/encoding/binary/binary.go:262
#	0xcb2737	github.com/safing/portmaster/windows_kext/kextinterface.newReadHelper+0x77			/go-workdir/windows_kext/kextinterface/info.go:152
#	0xcb3106	github.com/safing/portmaster/windows_kext/kextinterface.RecvInfo+0x46				/go-workdir/windows_kext/kextinterface/info.go:220
#	0xcb7944	github.com/safing/portmaster/service/firewall/interception/windowskext2.RecvVerdictRequest+0x44	/go-workdir/service/firewall/interception/windowskext2/kext.go:116
#	0xcb7934	github.com/safing/portmaster/service/firewall/interception/windowskext2.Handler+0x34		/go-workdir/service/firewall/interception/windowskext2/handler.go:36
#	0xcb9d68	github.com/safing/portmaster/service/firewall/interception.startInterception.func3+0x28		/go-workdir/service/firewall/interception/interception_windows.go:61
#	0x578065	github.com/safing/portmaster/service/mgr.(*Manager).runWorker+0xe5				/go-workdir/service/mgr/worker.go:354
#	0x577331	github.com/safing/portmaster/service/mgr.(*Manager).manageWorker+0x1f1				/go-workdir/service/mgr/worker.go:188

1 @ 0xc864e 0x61ee5 0x61a72 0xb1405a 0x578066 0x577332 0xd0681
#	0xb14059	github.com/safing/portmaster/service/resolver.listenToMDNS+0x619	/go-workdir/service/resolver/resolver-mdns.go:147
#	0x578065	github.com/safing/portmaster/service/mgr.(*Manager).runWorker+0xe5	/go-workdir/service/mgr/worker.go:354
#	0x577331	github.com/safing/portmaster/service/mgr.(*Manager).manageWorker+0x1f1	/go-workdir/service/mgr/worker.go:188

1 @ 0xc864e 0x61ee5 0x61a72 0xce1033 0xce2fe5 0x27353b 0x273e8f 0xce2f12 0xce2f07 0x96add 0xd0681
#	0xce1032	github.com/safing/portmaster/cmds/cmdbase.RunService+0x392	/go-workdir/cmds/cmdbase/service.go:115
#	0xce2fe4	main.mainRun+0x64						/go-workdir/cmds/portmaster-core/main.go:67
#	0x27353a	github.com/spf13/cobra.(*Command).execute+0xaba			/.go-mod-cache/github.com/spf13/[email protected]/command.go:989
#	0x273e8e	github.com/spf13/cobra.(*Command).ExecuteC+0x44e		/.go-mod-cache/github.com/spf13/[email protected]/command.go:1117
#	0xce2f11	github.com/spf13/cobra.(*Command).Execute+0x31			/.go-mod-cache/github.com/spf13/[email protected]/command.go:1041
#	0xce2f06	main.main+0x26							/go-workdir/cmds/portmaster-core/main.go:59
#	0x96adc		runtime.main+0x27c						/usr/local/go/src/runtime/proc.go:283

1 @ 0xc864e 0x8d6b7 0xc77e5 0x157627 0x158a85 0x15975b 0x1cf925 0x1e62a5 0x3d4f57 0xd0681
#	0xc77e4		internal/poll.runtime_pollWait+0x84		/usr/local/go/src/runtime/netpoll.go:351
#	0x157626	internal/poll.(*pollDesc).wait+0x26		/usr/local/go/src/internal/poll/fd_poll_runtime.go:84
#	0x158a84	internal/poll.execIO+0x104			/usr/local/go/src/internal/poll/fd_windows.go:177
#	0x15975a	internal/poll.(*FD).Read+0x29a			/usr/local/go/src/internal/poll/fd_windows.go:438
#	0x1cf924	net.(*netFD).Read+0x24				/usr/local/go/src/net/fd_posix.go:55
#	0x1e62a4	net.(*conn).Read+0x44				/usr/local/go/src/net/net.go:194
#	0x3d4f56	net/http.(*connReader).backgroundRead+0x36	/usr/local/go/src/net/http/server.go:690

1 @ 0xc864e 0x8d6b7 0xc77e5 0x157627 0x158a85 0x15975b 0x1cf925 0x1e62a5 0xb15e17 0xb14189 0x578066 0x577332 0xd0681
#	0xc77e4		internal/poll.runtime_pollWait+0x84					/usr/local/go/src/runtime/netpoll.go:351
#	0x157626	internal/poll.(*pollDesc).wait+0x26					/usr/local/go/src/internal/poll/fd_poll_runtime.go:84
#	0x158a84	internal/poll.execIO+0x104						/usr/local/go/src/internal/poll/fd_windows.go:177
#	0x15975a	internal/poll.(*FD).Read+0x29a						/usr/local/go/src/internal/poll/fd_windows.go:438
#	0x1cf924	net.(*netFD).Read+0x24							/usr/local/go/src/net/fd_posix.go:55
#	0x1e62a4	net.(*conn).Read+0x44							/usr/local/go/src/net/net.go:194
#	0xb15e16	github.com/safing/portmaster/service/resolver.listenForDNSPackets+0x76	/go-workdir/service/resolver/resolver-mdns.go:343
#	0xb14188	github.com/safing/portmaster/service/resolver.listenToMDNS.func7+0x28	/go-workdir/service/resolver/resolver-mdns.go:131
#	0x578065	github.com/safing/portmaster/service/mgr.(*Manager).runWorker+0xe5	/go-workdir/service/mgr/worker.go:354
#	0x577331	github.com/safing/portmaster/service/mgr.(*Manager).manageWorker+0x1f1	/go-workdir/service/mgr/worker.go:188

1 @ 0xc864e 0x8d6b7 0xc77e5 0x157627 0x158a85 0x15975b 0x1cf925 0x1e62a5 0xb15e17 0xb14249 0x578066 0x577332 0xd0681
#	0xc77e4		internal/poll.runtime_pollWait+0x84					/usr/local/go/src/runtime/netpoll.go:351
#	0x157626	internal/poll.(*pollDesc).wait+0x26					/usr/local/go/src/internal/poll/fd_poll_runtime.go:84
#	0x158a84	internal/poll.execIO+0x104						/usr/local/go/src/internal/poll/fd_windows.go:177
#	0x15975a	internal/poll.(*FD).Read+0x29a						/usr/local/go/src/internal/poll/fd_windows.go:438
#	0x1cf924	net.(*netFD).Read+0x24							/usr/local/go/src/net/fd_posix.go:55
#	0x1e62a4	net.(*conn).Read+0x44							/usr/local/go/src/net/net.go:194
#	0xb15e16	github.com/safing/portmaster/service/resolver.listenForDNSPackets+0x76	/go-workdir/service/resolver/resolver-mdns.go:343
#	0xb14248	github.com/safing/portmaster/service/resolver.listenToMDNS.func3+0x28	/go-workdir/service/resolver/resolver-mdns.go:104
#	0x578065	github.com/safing/portmaster/service/mgr.(*Manager).runWorker+0xe5	/go-workdir/service/mgr/worker.go:354
#	0x577331	github.com/safing/portmaster/service/mgr.(*Manager).manageWorker+0x1f1	/go-workdir/service/mgr/worker.go:188

1 @ 0xc864e 0x8d6b7 0xc77e5 0x157627 0x158a85 0x15975b 0x1cf925 0x1e62a5 0xb15e17 0xb142a9 0x578066 0x577332 0xd0681
#	0xc77e4		internal/poll.runtime_pollWait+0x84					/usr/local/go/src/runtime/netpoll.go:351
#	0x157626	internal/poll.(*pollDesc).wait+0x26					/usr/local/go/src/internal/poll/fd_poll_runtime.go:84
#	0x158a84	internal/poll.execIO+0x104						/usr/local/go/src/internal/poll/fd_windows.go:177
#	0x15975a	internal/poll.(*FD).Read+0x29a						/usr/local/go/src/internal/poll/fd_windows.go:438
#	0x1cf924	net.(*netFD).Read+0x24							/usr/local/go/src/net/fd_posix.go:55
#	0x1e62a4	net.(*conn).Read+0x44							/usr/local/go/src/net/net.go:194
#	0xb15e16	github.com/safing/portmaster/service/resolver.listenForDNSPackets+0x76	/go-workdir/service/resolver/resolver-mdns.go:343
#	0xb142a8	github.com/safing/portmaster/service/resolver.listenToMDNS.func1+0x28	/go-workdir/service/resolver/resolver-mdns.go:91
#	0x578065	github.com/safing/portmaster/service/mgr.(*Manager).runWorker+0xe5	/go-workdir/service/mgr/worker.go:354
#	0x577331	github.com/safing/portmaster/service/mgr.(*Manager).manageWorker+0x1f1	/go-workdir/service/mgr/worker.go:188

1 @ 0xc864e 0x8d6b7 0xc77e5 0x157627 0x158a85 0x15ab54 0x1cfc25 0x1f3516 0x1f1490 0x1f162a 0x7a793c 0x795d9d 0x792fb3 0x794a25 0x79361a 0xcd3708 0x578066 0x577332 0xd0681
#	0xc77e4		internal/poll.runtime_pollWait+0x84						/usr/local/go/src/runtime/netpoll.go:351
#	0x157626	internal/poll.(*pollDesc).wait+0x26						/usr/local/go/src/internal/poll/fd_poll_runtime.go:84
#	0x158a84	internal/poll.execIO+0x104							/usr/local/go/src/internal/poll/fd_windows.go:177
#	0x15ab53	internal/poll.(*FD).ReadFromInet6+0x133						/usr/local/go/src/internal/poll/fd_windows.go:639
#	0x1cfc24	net.(*netFD).readFromInet6+0x24							/usr/local/go/src/net/fd_posix.go:72
#	0x1f3515	net.(*UDPConn).readFrom+0x75							/usr/local/go/src/net/udpsock_posix.go:59
#	0x1f148f	net.(*UDPConn).readFromUDP+0x2f							/usr/local/go/src/net/udpsock.go:149
#	0x1f1629	net.(*UDPConn).ReadFrom+0x49							/usr/local/go/src/net/udpsock.go:158
#	0x7a793b	github.com/miekg/dns.ReadFromSessionUDP+0x1b					/.go-mod-cache/github.com/miekg/[email protected]/udp_windows.go:22
#	0x795d9c	github.com/miekg/dns.(*Server).readUDP+0xfc					/.go-mod-cache/github.com/miekg/[email protected]/server.go:716
#	0x792fb2	github.com/miekg/dns.defaultReader.ReadUDP+0x12					/.go-mod-cache/github.com/miekg/[email protected]/server.go:174
#	0x794a24	github.com/miekg/dns.(*Server).serveUDP+0x244					/.go-mod-cache/github.com/miekg/[email protected]/server.go:530
#	0x793619	github.com/miekg/dns.(*Server).ListenAndServe+0x519				/.go-mod-cache/github.com/miekg/[email protected]/server.go:359
#	0xcd3707	github.com/safing/portmaster/service/nameserver.start.startListener.func4+0x187	/go-workdir/service/nameserver/module.go:156
#	0x578065	github.com/safing/portmaster/service/mgr.(*Manager).runWorker+0xe5		/go-workdir/service/mgr/worker.go:354
#	0x577331	github.com/safing/portmaster/service/mgr.(*Manager).manageWorker+0x1f1		/go-workdir/service/mgr/worker.go:188

1 @ 0xc864e 0x8d6b7 0xc77e5 0x157627 0x158a85 0x15d005 0x15d336 0x1d1a4b 0x1efd9b 0x1eeb50 0x3e048c 0x3e0091 0x5daffa 0x578066 0x577c6a 0x5d9338 0x5d9315 0x578066 0x577332 0xd0681
#	0xc77e4		internal/poll.runtime_pollWait+0x84					/usr/local/go/src/runtime/netpoll.go:351
#	0x157626	internal/poll.(*pollDesc).wait+0x26					/usr/local/go/src/internal/poll/fd_poll_runtime.go:84
#	0x158a84	internal/poll.execIO+0x104						/usr/local/go/src/internal/poll/fd_windows.go:177
#	0x15d004	internal/poll.(*FD).acceptOne+0x64					/usr/local/go/src/internal/poll/fd_windows.go:946
#	0x15d335	internal/poll.(*FD).Accept+0x1b5					/usr/local/go/src/internal/poll/fd_windows.go:980
#	0x1d1a4a	net.(*netFD).accept+0x4a						/usr/local/go/src/net/fd_windows.go:182
#	0x1efd9a	net.(*TCPListener).accept+0x1a						/usr/local/go/src/net/tcpsock_posix.go:159
#	0x1eeb4f	net.(*TCPListener).Accept+0x2f						/usr/local/go/src/net/tcpsock.go:380
#	0x3e048b	net/http.(*Server).Serve+0x30b						/usr/local/go/src/net/http/server.go:3424
#	0x3e0090	net/http.(*Server).ListenAndServe+0x70					/usr/local/go/src/net/http/server.go:3350
#	0x5daff9	github.com/safing/portmaster/base/api.serverManager.func1+0x19		/go-workdir/base/api/router.go:92
#	0x578065	github.com/safing/portmaster/service/mgr.(*Manager).runWorker+0xe5	/go-workdir/service/mgr/worker.go:354
#	0x577c69	github.com/safing/portmaster/service/mgr.(*Manager).do+0x1e9		/go-workdir/service/mgr/worker.go:286
#	0x5d9337	github.com/safing/portmaster/service/mgr.(*Manager).Do+0xd7		/go-workdir/service/mgr/worker.go:259
#	0x5d9314	github.com/safing/portmaster/base/api.serverManager+0xb4		/go-workdir/base/api/router.go:91
#	0x578065	github.com/safing/portmaster/service/mgr.(*Manager).runWorker+0xe5	/go-workdir/service/mgr/worker.go:354
#	0x577331	github.com/safing/portmaster/service/mgr.(*Manager).manageWorker+0x1f1	/go-workdir/service/mgr/worker.go:188

1 @ 0xc864e 0xa9137 0x47ff72 0x47fdf4 0xd0681
#	0x47ff71	github.com/safing/portmaster/base/log.writer+0xd1		/go-workdir/base/log/output.go:132
#	0x47fdf3	github.com/safing/portmaster/base/log.writerManager+0x73	/go-workdir/base/log/output.go:90

1 @ 0xc864e 0xa9137 0x5b7a25 0x578066 0x577332 0xd0681
#	0x5b7a24	github.com/safing/portmaster/base/rng.fullFeeder+0x84			/go-workdir/base/rng/fullfeed.go:25
#	0x578065	github.com/safing/portmaster/service/mgr.(*Manager).runWorker+0xe5	/go-workdir/service/mgr/worker.go:354
#	0x577331	github.com/safing/portmaster/service/mgr.(*Manager).manageWorker+0x1f1	/go-workdir/service/mgr/worker.go:188

1 @ 0xc864e 0xa9137 0x5b83a9 0x578066 0x577332 0xd0681
#	0x5b83a8	github.com/safing/portmaster/base/rng.osFeeder+0x168			/go-workdir/base/rng/osfeeder.go:27
#	0x578065	github.com/safing/portmaster/service/mgr.(*Manager).runWorker+0xe5	/go-workdir/service/mgr/worker.go:354
#	0x577331	github.com/safing/portmaster/service/mgr.(*Manager).manageWorker+0x1f1	/go-workdir/service/mgr/worker.go:188

1 @ 0xc864e 0xa9137 0x5b8cea 0x578066 0x577332 0xd0681
#	0x5b8ce9	github.com/safing/portmaster/base/rng.tickFeeder+0x2c9			/go-workdir/base/rng/tickfeeder.go:63
#	0x578065	github.com/safing/portmaster/service/mgr.(*Manager).runWorker+0xe5	/go-workdir/service/mgr/worker.go:354
#	0x577331	github.com/safing/portmaster/service/mgr.(*Manager).manageWorker+0x1f1	/go-workdir/service/mgr/worker.go:188

1 @ 0xc864e 0xa9137 0x670b66 0x578066 0x577332 0xd0681
#	0x670b65	github.com/safing/portmaster/base/notifications.cleaner+0xc5		/go-workdir/base/notifications/cleaner.go:14
#	0x578065	github.com/safing/portmaster/service/mgr.(*Manager).runWorker+0xe5	/go-workdir/service/mgr/worker.go:354
#	0x577331	github.com/safing/portmaster/service/mgr.(*Manager).manageWorker+0x1f1	/go-workdir/service/mgr/worker.go:188

1 @ 0xc864e 0xa9137 0x7debb2 0x578066 0x577332 0xd0681
#	0x7debb1	github.com/safing/portmaster/service/intel/geoip.(*updateWorker).run+0x151	/go-workdir/service/intel/geoip/database.go:197
#	0x578065	github.com/safing/portmaster/service/mgr.(*Manager).runWorker+0xe5		/go-workdir/service/mgr/worker.go:354
#	0x577331	github.com/safing/portmaster/service/mgr.(*Manager).manageWorker+0x1f1		/go-workdir/service/mgr/worker.go:188

1 @ 0xc864e 0xa9137 0x7e5525 0x578066 0x577332 0xd0681
#	0x7e5524	github.com/safing/portmaster/service/netenv.monitorNetworkChanges+0xe4	/go-workdir/service/netenv/network-change.go:52
#	0x578065	github.com/safing/portmaster/service/mgr.(*Manager).runWorker+0xe5	/go-workdir/service/mgr/worker.go:354
#	0x577331	github.com/safing/portmaster/service/mgr.(*Manager).manageWorker+0x1f1	/go-workdir/service/mgr/worker.go:188

1 @ 0xc864e 0xa9137 0x7e68d0 0x578066 0x577332 0xd0681
#	0x7e68cf	github.com/safing/portmaster/service/netenv.monitorOnlineStatus+0xcf	/go-workdir/service/netenv/online-status.go:363
#	0x578065	github.com/safing/portmaster/service/mgr.(*Manager).runWorker+0xe5	/go-workdir/service/mgr/worker.go:354
#	0x577331	github.com/safing/portmaster/service/mgr.(*Manager).manageWorker+0x1f1	/go-workdir/service/mgr/worker.go:188

1 @ 0xc864e 0xa9137 0x7ffc35 0x578066 0x577332 0xd0681
#	0x7ffc34	github.com/safing/portmaster/service/status.(*Status).statusPublisher+0x74	/go-workdir/service/status/status.go:55
#	0x578065	github.com/safing/portmaster/service/mgr.(*Manager).runWorker+0xe5		/go-workdir/service/mgr/worker.go:354
#	0x577331	github.com/safing/portmaster/service/mgr.(*Manager).manageWorker+0x1f1		/go-workdir/service/mgr/worker.go:188

1 @ 0xc864e 0xa9137 0xad9796 0x578066 0x577332 0xd0681
#	0xad9795	github.com/safing/portmaster/service/profile.cleanActiveProfiles+0x95	/go-workdir/service/profile/active.go:59
#	0x578065	github.com/safing/portmaster/service/mgr.(*Manager).runWorker+0xe5	/go-workdir/service/mgr/worker.go:354
#	0x577331	github.com/safing/portmaster/service/mgr.(*Manager).manageWorker+0x1f1	/go-workdir/service/mgr/worker.go:188

1 @ 0xc864e 0xa9137 0xaf272d 0x578066 0x577332 0xd0681
#	0xaf272c	github.com/safing/portmaster/service/profile.start.startProfileUpdateChecker.func1+0x12c	/go-workdir/service/profile/database.go:57
#	0x578065	github.com/safing/portmaster/service/mgr.(*Manager).runWorker+0xe5				/go-workdir/service/mgr/worker.go:354
#	0x577331	github.com/safing/portmaster/service/mgr.(*Manager).manageWorker+0x1f1				/go-workdir/service/mgr/worker.go:188

1 @ 0xc864e 0xa9137 0xb14397 0xb14145 0x578066 0x577332 0xd0681
#	0xb14396	github.com/safing/portmaster/service/resolver.handleMDNSMessages+0xb6	/go-workdir/service/resolver/resolver-mdns.go:153
#	0xb14144	github.com/safing/portmaster/service/resolver.listenToMDNS.func9+0x24	/go-workdir/service/resolver/resolver-mdns.go:143
#	0x578065	github.com/safing/portmaster/service/mgr.(*Manager).runWorker+0xe5	/go-workdir/service/mgr/worker.go:354
#	0x577331	github.com/safing/portmaster/service/mgr.(*Manager).manageWorker+0x1f1	/go-workdir/service/mgr/worker.go:188

1 @ 0xc864e 0xa9137 0xbdcb7c 0x578066 0x577332 0xd0681
#	0xbdcb7b	github.com/safing/portmaster/service/network.connectionCleaner+0x17b	/go-workdir/service/network/clean.go:39
#	0x578065	github.com/safing/portmaster/service/mgr.(*Manager).runWorker+0xe5	/go-workdir/service/mgr/worker.go:354
#	0x577331	github.com/safing/portmaster/service/mgr.(*Manager).manageWorker+0x1f1	/go-workdir/service/mgr/worker.go:188

1 @ 0xc864e 0xa9137 0xbe46bf 0x578066 0x577332 0xd0681
#	0xbe46be	github.com/safing/portmaster/service/network.openDNSRequestWriter+0x15e	/go-workdir/service/network/dns.go:182
#	0x578065	github.com/safing/portmaster/service/mgr.(*Manager).runWorker+0xe5	/go-workdir/service/mgr/worker.go:354
#	0x577331	github.com/safing/portmaster/service/mgr.(*Manager).manageWorker+0x1f1	/go-workdir/service/mgr/worker.go:188

1 @ 0xc864e 0xa9137 0xc53651 0xc56f8a 0x578066 0x577332 0xd0681
#	0xc53650	github.com/safing/portmaster/service/netquery.(*Manager).HandleFeed+0xb0	/go-workdir/service/netquery/manager.go:101
#	0xc56f89	github.com/safing/portmaster/service/netquery.(*NetQuery).Start.func2+0x29	/go-workdir/service/netquery/module_api.go:215
#	0x578065	github.com/safing/portmaster/service/mgr.(*Manager).runWorker+0xe5		/go-workdir/service/mgr/worker.go:354
#	0x577331	github.com/safing/portmaster/service/mgr.(*Manager).manageWorker+0x1f1		/go-workdir/service/mgr/worker.go:188

1 @ 0xc864e 0xa9137 0xc56dd9 0x578066 0x577332 0xd0681
#	0xc56dd8	github.com/safing/portmaster/service/netquery.(*NetQuery).Start.func3+0x98	/go-workdir/service/netquery/module_api.go:221
#	0x578065	github.com/safing/portmaster/service/mgr.(*Manager).runWorker+0xe5		/go-workdir/service/mgr/worker.go:354
#	0x577331	github.com/safing/portmaster/service/mgr.(*Manager).manageWorker+0x1f1		/go-workdir/service/mgr/worker.go:188

1 @ 0xc864e 0xa9137 0xc571c7 0x578066 0x577332 0xd0681
#	0xc571c6	github.com/safing/portmaster/service/netquery.(*NetQuery).Start.func1+0x206	/go-workdir/service/netquery/module_api.go:194
#	0x578065	github.com/safing/portmaster/service/mgr.(*Manager).runWorker+0xe5		/go-workdir/service/mgr/worker.go:354
#	0x577331	github.com/safing/portmaster/service/mgr.(*Manager).manageWorker+0x1f1		/go-workdir/service/mgr/worker.go:188

1 @ 0xc864e 0xa9137 0xcbb6b4 0x578066 0x577332 0xd0681
#	0xcbb6b3	github.com/safing/portmaster/service/firewall/interception.startInterception.func4+0xd3	/go-workdir/service/firewall/interception/interception_windows.go:70
#	0x578065	github.com/safing/portmaster/service/mgr.(*Manager).runWorker+0xe5			/go-workdir/service/mgr/worker.go:354
#	0x577331	github.com/safing/portmaster/service/mgr.(*Manager).manageWorker+0x1f1			/go-workdir/service/mgr/worker.go:188

1 @ 0xc864e 0xa9137 0xcbb8b4 0x578066 0x577332 0xd0681
#	0xcbb8b3	github.com/safing/portmaster/service/firewall/interception.startInterception.func5+0xd3	/go-workdir/service/firewall/interception/interception_windows.go:87
#	0x578065	github.com/safing/portmaster/service/mgr.(*Manager).runWorker+0xe5			/go-workdir/service/mgr/worker.go:354
#	0x577331	github.com/safing/portmaster/service/mgr.(*Manager).manageWorker+0x1f1			/go-workdir/service/mgr/worker.go:188

1 @ 0xc864e 0xa9137 0xcbbab5 0x578066 0x577332 0xd0681
#	0xcbbab4	github.com/safing/portmaster/service/firewall/interception.startInterception.func6+0xd4	/go-workdir/service/firewall/interception/interception_windows.go:103
#	0x578065	github.com/safing/portmaster/service/mgr.(*Manager).runWorker+0xe5			/go-workdir/service/mgr/worker.go:354
#	0x577331	github.com/safing/portmaster/service/mgr.(*Manager).manageWorker+0x1f1			/go-workdir/service/mgr/worker.go:188

1 @ 0xc864e 0xa9137 0xccd6a6 0x578066 0x577332 0xd0681
#	0xccd6a5	github.com/safing/portmaster/service/firewall.packetHandler+0x85	/go-workdir/service/firewall/packet_handler.go:823
#	0x578065	github.com/safing/portmaster/service/mgr.(*Manager).runWorker+0xe5	/go-workdir/service/mgr/worker.go:354
#	0x577331	github.com/safing/portmaster/service/mgr.(*Manager).manageWorker+0x1f1	/go-workdir/service/mgr/worker.go:188

1 @ 0xc864e 0xa9137 0xccd78c 0x578066 0x577332 0xd0681
#	0xccd78b	github.com/safing/portmaster/service/firewall.bandwidthUpdateHandler+0x8b	/go-workdir/service/firewall/packet_handler.go:838
#	0x578065	github.com/safing/portmaster/service/mgr.(*Manager).runWorker+0xe5		/go-workdir/service/mgr/worker.go:354
#	0x577331	github.com/safing/portmaster/service/mgr.(*Manager).manageWorker+0x1f1		/go-workdir/service/mgr/worker.go:188

1 @ 0xc864e 0xa9137 0xce04a5 0xb3745 0x607b5 0x60407 0xd042c 0xd0681
#	0xce04a4	golang.org/x/sys/windows/svc.serviceMain+0x3a4	/.go-mod-cache/golang.org/x/[email protected]/windows/svc/service.go:246
#	0xb3744		runtime.callbackWrap+0x204			/usr/local/go/src/runtime/syscall_windows.go:396
#	0x607b4		runtime.cgocallbackg1+0x294			/usr/local/go/src/runtime/cgocall.go:446
#	0x60406		runtime.cgocallbackg+0x166			/usr/local/go/src/runtime/cgocall.go:350
#	0xd042b		runtime.cgocallback+0xeb			/usr/local/go/src/runtime/asm_amd64.s:1084

1 @ 0xc864e 0xa9137 0xce18a5 0xce06df 0xd0681
#	0xce18a4	github.com/safing/portmaster/cmds/cmdbase.(*WindowsSystemService).Execute+0x284	/go-workdir/cmds/cmdbase/service_windows.go:101
#	0xce06de	golang.org/x/sys/windows/svc.serviceMain.func2+0x3e				/.go-mod-cache/golang.org/x/[email protected]/windows/svc/service.go:234


Terrance avatar Nov 11 '25 22:11 Terrance

Some more observations:

  • I'm not currently seeing the "access forbidden" errors, but requests are still failing in the same way

  • Looking at Network Activity filtered to a problematic domain, I can see sets of three requests:

    • 1x DNS Request by System DNS Client for an AAAA NXDOMAIN (expected: local DNS only provides A records)
    • 2x regular requests by Portmaster Core Service to the local DNS

    This suggests there was a pair of A and AAAA requests, but the A request got lost somewhere?

  • When in a browser and a domain doesn't resolve, repeatedly refreshing causes it to start working after about 5-10 seconds; other apps which make a string of requests seem to get completely bogged down (seemingly hitting this 5-10 second delay on each request)

  • ~~Restarting the Portmaster core service gets things working again, though domains will stop resolving after some time~~

Terrance avatar Nov 21 '25 21:11 Terrance

I can second the DNS issues, and I'm using Arch Linux. at random times, a warning pops that the sites could be loading faster if I turn on cached DNS, and soon after no connections can be made. It comes back after random time, or a restart.

I'm using v1 btw, and have AdGuard and Cloudflare DNS addresses set up.

djubre7 avatar Nov 23 '25 00:11 djubre7

I'm using v1 btw

Fwiw I had no issues on v1, this only started after upgrading to v2, and I haven't seen any hints to use caching. Given the difierence in version and platform, it might be worth raising a separate issue?

Terrance avatar Nov 23 '25 09:11 Terrance

I've had this also in v1, last reported here for v2: https://github.com/safing/portmaster/issues/1959

As a mitigation, this helped for me (but it doesn't fully prevent it):

# /etc/systemd/system/portmaster.service.d/override.conf
[Service]
LimitMEMLOCK=infinity
MemoryLow=640M
CPUSchedulingPolicy=fifo
CPUSchedulingPriority=10
IOSchedulingClass=realtime
IOSchedulingPriority=2
Nice=-20

kakra avatar Dec 17 '25 00:12 kakra