Nethserver-blacklist download

I activated mail notifications on my nethservers, and now one of them (the one holding the nsdc AD-container for our domain) sends an email every 20 minutes:

Subject: Cron root@hostname sleep $(( ( RANDOM % 60 ) )); /usr/share/nethserver-blacklist/download

Text: /bin/sh: /usr/share/nethserver-blacklist/download: No such file or directory

How can I fix this?

config getprop blacklist Url
https://github.com/firehol/blocklist-ipsets.git

By fixing I mean either fix the source of this error message or deactivate that email notification for this single event :slight_smile:

Could it have something to do with the fact, that I copy the letsencrypt certificate, which is gathered by one of the other nethservers and is then copied to /var/lib/machines/nsdc/var/lib/samba/private/tls/ ?

Looks like Threat Shield is removed but the cron job /etc/cron.d/nethserver-blacklist is still there.
If you removed Threat Shield you can safely remove the cronjob file.

2 Likes

Hm thats strange as this is our domain controller nethserver and I am pretty sure, I never installed something other on it. Just basic nethserver with only the following in applications: Restore data, ups and webserver. However - I removed the file, and report back if the problem comes back.

Thanks for your quick response and fast help. :slight_smile:

1 Like

@me:
Subject: Cron root@ns-srv01 sleep $(( ( RANDOM % 60 ) )); /usr/share/nethserver-blacklist/download ipsets

Text: [ERROR] Can’t update blacklist repository: fetch failed

Today another nethserver started to have this error. I narrowed it down to a dns problem on our pihole, where name resolution stopped working. That piHole is configured as dns server for that nethserver. Checking resolv.conf in debian/pihole, I saw it was empty. Still looking for the correct solution but adding dns-netservers ip.ad.re.ss followed by ifdown -a && ifup -a on the pihole vm fixed it for now. I thought, I should report here - just in case it could help someone or in case someone has seen this too, and maybe has a better solution.

3 Likes