Unbound Unbound whitelist

[BeachGuy]

I have Diversion, Skynet and unbound installed. I added a whitelist domain to Diversion and Skynet. I have unbound firewall enabled and went to add the domain to unbound but couldn't find a way. I entered "unbound_manager advanced" at root prompt and saw "ad" (Analyse Diversion White/Block lists [ file_name ] []). ad returned the following. How do I enter a domain to whitelist in unbound? BTW, I'm trying to add codium.com (sublime extension). When I run it's .exe I get the second comment. I thought Diversion and Skynet share the same lists, is that correct? Does unbound as well?

unbound: Diversion () file '/opt/share/diversion/list/blockinglist' NOT Found!
codium.exe: No connection could be made because the target machine actively refused it.

 

[Twiglets]

Diversion previously had a 'blockinglist' file, this has changed format and is called 'blockinglist.conf'.
I am not sure if unbound can handle the new format file !!!???

Are you aware that 'codium.com' resolves to 'a904c694c05102f30.awsglobalaccelerator.com' and may need to be 'whitelisted' as well.

There is no 'whitelist' file as such for unbound but you can achieve the same effect as follows:

(Look for 'local-zone' & 'local-data' at https://unbound.docs.nlnetlabs.nl/en/latest/manpages/unbound.conf.html)



Place the following in the unbound.conf file.

local-zone: "codium.com." transparent
local-data: "codium.com. A 13.248.169.48"
local-data: "codium.com. A 76.223.54.146"

local-zone: "a904c694c05102f30.awsglobalaccelerator.com." transparent
local-data: "a904c694c05102f30.awsglobalaccelerator.com. A 13.248.169.48"
local-data: "a904c694c05102f30.awsglobalaccelerator.com. A 76.223.54.146"

 

[BeachGuy]

Thank you for your comments. I know this should probably be posted on codium forums but it seems more like Merlin addon issue. I did your suggestions and added awsglobalaccelerator.com to Skynet/Diversion whitlelist. I also added your suggetions to unbound.conf file and still get the following. If you have any idea it would be appreciated. On the one hand I'm glad Skynet is working, on the other it's a pia to use some programs because of blocking issues.

E0830 13:45:29.614270 23028 api_server_client.go:131] Ping error: unavailable: dial tcp 0.0.0.0:50001: connectex: No connection could be made because the target machine actively refused it.

I'm just trying to run language_server_windows_x64.exe manually because when Sublime Text runs, a command windows opens with the same issue. Thought I'd try to manually install.


Here's the full log:

I0830 13:51:04.394805 21892 main.go:544] Starting language server manager with pid 21892
I0830 13:51:04.399304 21892 main.go:289] Language server manager attempting to connect to language server at 127.0.0.1:42100
I0830 13:51:04.425305 20036 main.go:538] Starting language server process with pid 20036
I0830 13:51:04.425305 20036 server.go:151] Language server will attempt to listen on host 127.0.0.1
I0830 13:51:04.425805 20036 server.go:158] Language server listening on fixed port at 42100
I0830 13:51:04.425805 20036 proxy.go:113] proxyplease.proxy> No proxy provided. Attempting to infer from system.
2024/08/30 13:51:04 [proxy.Provider.readWinHttpProxy] No proxy discovered via AutoDetect: winapi error #12180
I0830 13:51:04.429304 20036 proxy.go:113] proxyplease.proxy> No proxy could be determined. Assuming a direct connection.
I0830 13:51:04.429304 20036 client.go:589] [DEBUG] GET http://0.0.0.0:50001/exa.api_server_pb.ApiServerService/GetCompletions
I0830 13:51:04.429805 20036 client.go:646] [ERR] GET http://0.0.0.0:50001/exa.api_server_pb.ApiServerService/GetCompletions request failed: Get "http://0.0.0.0:50001/exa.api_server_pb.ApiServerService/GetCompletions": dial tcp 0.0.0.0:50001: connectex: No connection could be made because the target machine actively refused it.
I0830 13:51:04.429805 20036 client.go:690] [DEBUG] GET http://0.0.0.0:50001/exa.api_server_pb.ApiServerService/GetCompletions: retrying in 100ms (3 left)
I0830 13:51:04.543177 20036 client.go:646] [ERR] GET http://0.0.0.0:50001/exa.api_server_pb.ApiServerService/GetCompletions request failed: Get "http://0.0.0.0:50001/exa.api_server_pb.ApiServerService/GetCompletions": dial tcp 0.0.0.0:50001: connectex: No connection could be made because the target machine actively refused it.
I0830 13:51:04.543177 20036 client.go:690] [DEBUG] GET http://0.0.0.0:50001/exa.api_server_pb.ApiServerService/GetCompletions: retrying in 100ms (2 left)
I0830 13:51:04.651795 20036 client.go:646] [ERR] GET http://0.0.0.0:50001/exa.api_server_pb.ApiServerService/GetCompletions request failed: Get "http://0.0.0.0:50001/exa.api_server_pb.ApiServerService/GetCompletions": dial tcp 0.0.0.0:50001: connectex: No connection could be made because the target machine actively refused it.
I0830 13:51:04.651795 20036 client.go:690] [DEBUG] GET http://0.0.0.0:50001/exa.api_server_pb.ApiServerService/GetCompletions: retrying in 100ms (1 left)
I0830 13:51:04.760255 20036 client.go:646] [ERR] GET http://0.0.0.0:50001/exa.api_server_pb.ApiServerService/GetCompletions request failed: Get "http://0.0.0.0:50001/exa.api_server_pb.ApiServerService/GetCompletions": dial tcp 0.0.0.0:50001: connectex: No connection could be made because the target machine actively refused it.
W0830 13:51:04.760255 20036 proxy.go:128] proxy failed to connect: GET http://0.0.0.0:50001/exa.api_server_pb.ApiServerService/GetCompletions giving up after 4 attempt(s): Get "http://0.0.0.0:50001/exa.api_server_pb.ApiServerService/GetCompletions": dial tcp 0.0.0.0:50001: connectex: No connection could be made because the target machine actively refused it.
I0830 13:51:04.760255 20036 unleash.go:86] Initializing Unleash
I0830 13:51:04.955853 20036 unleash.go:106] Successfully initialized Unleash
I0830 13:51:04.975351 20036 server.go:336] Successfully created API server client
I0830 13:51:04.977851 20036 server.go:350] Successfully created API streaming client
I0830 13:51:04.996877 20036 server.go:359] Successfully initialized tokenizer
I0830 13:51:04.996877 20036 search_provider.go:169] Using database at C:\Users\Bill\.codeium\database\default/2/MODEL_EMBED_6591
I0830 13:51:05.000878 20036 search_provider.go:181] Successfully created embedding search database
I0830 13:51:05.000878 20036 search_provider.go:229] Successfully created embedding search provider
I0830 13:51:05.000878 20036 server.go:444] Successfully created exact search provider
E0830 13:51:05.001377 20036 unleash.go:57] Unleash error: Version string empty
E0830 13:51:05.001377 20036 unleash.go:57] Unleash error: Version string empty
E0830 13:51:05.001377 20036 unleash.go:57] Unleash error: Version string empty
E0830 13:51:05.001377 20036 unleash.go:57] Unleash error: Version string empty
E0830 13:51:05.001377 20036 unleash.go:57] Unleash error: Version string empty
E0830 13:51:05.001377 20036 unleash.go:57] Unleash error: Version string empty
E0830 13:51:05.001377 20036 unleash.go:57] Unleash error: Version string empty
E0830 13:51:05.001377 20036 unleash.go:57] Unleash error: Version string empty
I0830 13:51:05.003380 20036 server.go:472] Successfully created completion provider
I0830 13:51:05.042973 20036 server.go:548] Child process attempting to acquire lock file C:\Users\Bill\AppData\Local\Temp\child_lock_1725040264395305000_5578129451594774059
I0830 13:51:05.043394 20036 server.go:558] Child process acquired lock file C:\Users\Bill\AppData\Local\Temp\child_lock_1725040264395305000_5578129451594774059
E0830 13:51:05.045393 20036 api_server_client.go:131] Ping error: unavailable: dial tcp 0.0.0.0:50001: connectex: No connection could be made because the target machine actively refused it.
I0830 13:51:05.049893 21892 main.go:340] Language server manager successfully connected to new language server at 127.0.0.1:42100

 

[Twiglets]

An obvious test is to see if you can ping codium.com, using a ping command directly.
Disable unbound and see if the same ping command works.

Need to find which of Diversion/Skynet/Unbound is the problem.

I don't fully understand the routing through Diversion/Skynet/unbound that ping would be taking.

Also are you sure that the 'refused' message means that the address is being blocked and not that the destination host is simply dropping the connection for some reason.

 

[BeachGuy]

An obvious test is to see if you can ping codium.com, using a ping command directly.
Disable unbound and see if the same ping command works.

Need to find which of Diversion/Skynet/Unbound is the problem.

I don't fully understand the routing through Diversion/Skynet/unbound that ping would be taking.

Also are you sure that the 'refused' message means that the address is being blocked and not that the destination host is simply dropping the connection for some reason.

I can ping codium.com. I was thinking the same thing that their servers might be down. It would be a huge coincidence that the one time I'm trying to install codium their servers are down but I suppose possible. Does the fact that I can ping codium.com mean it's not an issue on my side? What about all the other severs/messages in the log? Thanks for your help/responses.

 

[Twiglets]

Looking at your log the thing that leaped out was the use of 0.0.0.0 as an address.

0.0.0.0 can be used as a placeholder for your address while a valid routable address is assigned.
I have not seen it used as a destination address, particularly as 0.0.0.0 is nonroutable.

Are you sure this is right ?

 

[dave14305]

Ping server.codeium.com from the same machine?

 

[BeachGuy]

Looking at your log the thing that leaped out was the use of 0.0.0.0 as an address.

0.0.0.0 can be used as a placeholder for your address while a valid routable address is assigned.
I have not seen it used as a destination address, particularly as 0.0.0.0 is nonroutable.

Are you sure this is right ?

I don't know. All I did was try to excecute/install their program (language_server_windows_x64.exe) which I believe is contact to their servers from Sublime plugin/extension. Like I said, a command window opens when starting ST to try to connect to their servers as well but is unsuccessful so I thought I'd try manual .exe. I thought it was odd too that I saw 127.0.0.1 and 0.0.0.0. I don't think that is configurable as all I'm doing is running their .exe as Admin.

 

[BeachGuy]

Ping server.codeium.com from the same machine?

yes

 

[Twiglets]

I don't know. All I did was try to excecute/install their program (language_server_windows_x64.exe) which I believe is contact to their servers from Sublime plugin/extension. Like I said, a command window opens when starting ST to try to connect to their servers as well but is unsuccessful so I thought I'd try manual .exe. I thought it was odd too that I saw 127.0.0.1 and 0.0.0.0. I don't think that is configurable as all I'm doing is running their .exe as Admin.

The command window will be setting its environment before it runs.

Maybe, this is what is missing ?

This is getting well outside of my knowledge as I know nothing about 'sublime' etc.

If you can keep the command window open you can query the environment to see what has been set.
Not unusual for the environment to be set when scripts are run etc.

 

[BeachGuy]

The command window will be setting its environment before it runs.

Maybe, this is what is missing ?

This is getting well outside of my knowledge as I know nothing about 'sublime' etc.

If you can keep the command window open you can query the environment to see what has been set.
Not unusual for the environment to be set when scripts are run etc.

The command window stays open though like it's hung trying to contact the servers. It is well beyond me too. I guess I'll just scrap codium extension. Thought I'd give it a try as it would be nice to have AI plugin in Sublime. Thanks for all your help!

 

[Twiglets]

The command window will be setting its environment before it runs.

Maybe, this is what is missing ?

This is getting well outside of my knowledge as I know nothing about 'sublime' etc.

If you can keep the command window open you can query the environment to see what has been set.
Not unusual for the environment to be set when scripts are run etc.

Check the official installation instructions.

Something possibly is being missed.

 

[Twiglets]

The command window stays open though like it's hung trying to contact the servers. It is well beyond me too. I guess I'll just scrap codium extension. Thought I'd give it a try as it would be nice to have AI plugin in Sublime. Thanks for all your help!

Last option is to stop Diversion/Skynet/unbound long enough to install it.

If it hangs with nothing in the way, there are other problems, probably at the codium end.

Sorry, I have run out of ideas at this point.
(It would be easier if I was able to get at the hardware and see what was happening !!!)

 

[BeachGuy]

Last option is to stop Diversion/Skynet/unbound long enough to install it.

If it hangs with nothing in the way, there are other problems, probably at the codium end.

Sorry, I have run out of ideas at this point.
(It would be easier if I was able to get at the hardware and see what was happening !!!)

Did this (stop Diversion/Skynet/unbound long enough to install it) and still no server connect. Really strange it's trying to ping 0.0.0.0. The extension is from Github (https://github.com/ayushch80/codium-sublime) so not official Codium or Sublime. I put in an issue request there. Thanks for helping me debug. At least it's not on my end.

 

[BeachGuy]

It's weird because I followed the instructions here to the "t" but got the server error. And this is the "official" Codium website.

Sublime Text Tutorial | Codeium · Free AI Code Completion & Chat

Codeium offers best in class AI code completion, search, and chat — all for free. It supports over 70+ languages and integrates with your favorite IDEs, with lightning fast speeds and state-of-the-art suggestion quality.

codeium.com

 

[BeachGuy]

Wanted to provide a follow-up. Apparently the AI-APIs change so often the other devs can't keep up. Here's a response from ST-codex plugin on Github...

Yes - sorry, the openai api has undergone significant changes since the last update of this package. I will try to attend to this when I can find time - but if anyone else wants to try their hand at a PR to update to the current api, it 'should' be relatively straightforward.
Thank you for the alert!