• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Problem with DNS resolver

General pfSense Questions
7
64
4.6k
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • U
    Unoptanio @fireodo
    last edited by Jun 6, 2024, 8:12 AM

    @fireodo

    login-to-view

    pfSensePlus24.03 2U BareMetal Asrock Industrial IMB-X1314MicroATX
    CPU: i7-13700@5.2GHz, RAM:32GB ECC, n°2 Samsung 870EVO SATA 2.5” SSD 1TB (ZFS) Raid1
    n°3 Intel i225-LM 2500/1000/100Mbps, n°1 NIC Intel i350-T4V2 10/100/1000 Mbps 4*GLAN, n°1 Intel X520-DA2

    F 1 Reply Last reply Jun 6, 2024, 8:15 AM Reply Quote 0
    • F
      fireodo @Unoptanio
      last edited by fireodo Jun 6, 2024, 8:16 AM Jun 6, 2024, 8:15 AM

      @Unoptanio said in Problem with DNS resolver:

      @fireodo

      login-to-view

      Do at the CLI:

      pkg search unbound
      

      what do you get?

      Try:

      pkg install unbound-1.19.1
      

      Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
      SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
      pfsense 2.7.2 CE
      Packages: Apcupsd Cron Iftop Iperf LCDproc Nmap pfBlockerNG RRD_Summary Shellcmd Snort Speedtest System_Patches.

      U 1 Reply Last reply Jun 6, 2024, 8:17 AM Reply Quote 0
      • D
        darcey @Unoptanio
        last edited by darcey Jun 6, 2024, 8:20 AM Jun 6, 2024, 8:15 AM

        @Unoptanio Two things to try. Disable resolution of DHCP leases and Openvpn client hostnames. Also, increase the loglevel, which might give you more clues. One other thing, leave listening/outgoing interfaces as 'all'.
        Obviously not suggesting these as solutions but as a means to getting to the cause/culprit.

        1 Reply Last reply Reply Quote 0
        • U
          Unoptanio @fireodo
          last edited by Jun 6, 2024, 8:17 AM

          @fireodo

          pkg search unbound
          

          unbound-1.19.1 Validating, recursive, and caching DNS resolver

          pfSensePlus24.03 2U BareMetal Asrock Industrial IMB-X1314MicroATX
          CPU: i7-13700@5.2GHz, RAM:32GB ECC, n°2 Samsung 870EVO SATA 2.5” SSD 1TB (ZFS) Raid1
          n°3 Intel i225-LM 2500/1000/100Mbps, n°1 NIC Intel i350-T4V2 10/100/1000 Mbps 4*GLAN, n°1 Intel X520-DA2

          F 1 Reply Last reply Jun 6, 2024, 8:18 AM Reply Quote 0
          • F
            fireodo @Unoptanio
            last edited by fireodo Jun 6, 2024, 8:19 AM Jun 6, 2024, 8:18 AM

            @Unoptanio said in Problem with DNS resolver:

            @fireodo

            pkg search unbound
            

            unbound-1.19.1 Validating, recursive, and caching DNS resolver

            Now do:

            pkg install unbound-1.19.1
            

            Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
            SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
            pfsense 2.7.2 CE
            Packages: Apcupsd Cron Iftop Iperf LCDproc Nmap pfBlockerNG RRD_Summary Shellcmd Snort Speedtest System_Patches.

            U 1 Reply Last reply Jun 6, 2024, 8:26 AM Reply Quote 0
            • U
              Unoptanio @fireodo
              last edited by Unoptanio Jun 6, 2024, 8:28 AM Jun 6, 2024, 8:26 AM

              @fireodo

              [2.7.2-RELEASE][admin@xxxxxxxxxxxx]/root: pkg install unbound-1.19.1
              Updating pfSense-core repository catalogue...
              Fetching meta.conf: 0%
              Fetching packagesite.pkg: 0%
              pfSense-core repository is up to date.
              Updating pfSense repository catalogue...
              Fetching meta.conf: 0%
              Fetching packagesite.pkg: 0%
              pfSense repository is up to date.
              All repositories are up to date.
              The following 1 package(s) will be affected (of 0 checked):

              Installed packages to be UPGRADED:
              unbound: 1.18.0_1 -> 1.19.1 [pfSense]

              
              [2.7.2-RELEASE][admin@Axxxxxxxxx]/root: pkg search unbound
              unbound-1.19.1                 Validating, recursive, and caching DNS resolver
              
              

              pfSensePlus24.03 2U BareMetal Asrock Industrial IMB-X1314MicroATX
              CPU: i7-13700@5.2GHz, RAM:32GB ECC, n°2 Samsung 870EVO SATA 2.5” SSD 1TB (ZFS) Raid1
              n°3 Intel i225-LM 2500/1000/100Mbps, n°1 NIC Intel i350-T4V2 10/100/1000 Mbps 4*GLAN, n°1 Intel X520-DA2

              F 1 Reply Last reply Jun 6, 2024, 8:29 AM Reply Quote 0
              • F
                fireodo @Unoptanio
                last edited by Jun 6, 2024, 8:29 AM

                @Unoptanio said in Problem with DNS resolver:

                unbound: 1.18.0_1 -> 1.19.1 [pfSense]

                Lets see if your trouble is gone 🤞 ✊

                Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
                SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
                pfsense 2.7.2 CE
                Packages: Apcupsd Cron Iftop Iperf LCDproc Nmap pfBlockerNG RRD_Summary Shellcmd Snort Speedtest System_Patches.

                U 1 Reply Last reply Jun 6, 2024, 8:30 AM Reply Quote 1
                • U
                  Unoptanio @fireodo
                  last edited by Unoptanio Jun 6, 2024, 8:33 AM Jun 6, 2024, 8:30 AM

                  @fireodo

                  In your opinion, why didn't I have the latest version before? I also have all the patches installed

                  What version of pfsense is Unbound 1.18.0_1 from?

                  login-to-view

                  pfSensePlus24.03 2U BareMetal Asrock Industrial IMB-X1314MicroATX
                  CPU: i7-13700@5.2GHz, RAM:32GB ECC, n°2 Samsung 870EVO SATA 2.5” SSD 1TB (ZFS) Raid1
                  n°3 Intel i225-LM 2500/1000/100Mbps, n°1 NIC Intel i350-T4V2 10/100/1000 Mbps 4*GLAN, n°1 Intel X520-DA2

                  F 2 Replies Last reply Jun 6, 2024, 8:35 AM Reply Quote 0
                  • F
                    fireodo @Unoptanio
                    last edited by Jun 6, 2024, 8:35 AM

                    @Unoptanio said in Problem with DNS resolver:

                    @fireodo

                    In your opinion, why didn't I have the latest version before? I also have all the patches installed

                    There are updates that are not shown on the GUI and not with Patches - they are shown only on the CLI.

                    Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
                    SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
                    pfsense 2.7.2 CE
                    Packages: Apcupsd Cron Iftop Iperf LCDproc Nmap pfBlockerNG RRD_Summary Shellcmd Snort Speedtest System_Patches.

                    D 1 Reply Last reply Jun 6, 2024, 8:41 AM Reply Quote 1
                    • D
                      darcey @fireodo
                      last edited by Jun 6, 2024, 8:41 AM

                      @fireodo My 2.7.2CE install is also currently on unbound-1.18.0_1

                      [2.7.2-RELEASE][root@fw.local.lan]/root: pkg search unbound
                      unbound-1.19.1                 Validating, recursive, and caching DNS resolver
                      [2.7.2-RELEASE][root@fw.local.lan]/root: pkg info | grep unbound
                      unbound-1.18.0_1               Validating, recursive, and caching DNS resolver
                      

                      When might it pull in the updated package, other than explicit upgrade via the cmdline?

                      F 1 Reply Last reply Jun 6, 2024, 9:01 AM Reply Quote 0
                      • F
                        fireodo @Unoptanio
                        last edited by fireodo Jun 6, 2024, 9:06 AM Jun 6, 2024, 8:42 AM

                        @Unoptanio said in Problem with DNS resolver:

                        What version of pfsense is Unbound 1.18.0_1 from?

                        I guess 2.7.1 (not shure)

                        I have a script (see attachment - change .zip to .php) that looks via cronjob if there are some updates. (The script is from @Gertjan if I remember well) pkg_check.zip
                        The cronjob looks loke this:

                        /usr/bin/nice -n20 /usr/local/bin/php -q /root/bin/pkg_check.php | logger
                        

                        Edit: In my case the location of the script is in /root/bin (directory I have created) - put the script in your case where you wish ...

                        Tanti auguri :-)

                        Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
                        SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
                        pfsense 2.7.2 CE
                        Packages: Apcupsd Cron Iftop Iperf LCDproc Nmap pfBlockerNG RRD_Summary Shellcmd Snort Speedtest System_Patches.

                        U 2 Replies Last reply Jun 6, 2024, 8:44 AM Reply Quote 1
                        • U
                          Unoptanio @fireodo
                          last edited by Jun 6, 2024, 8:44 AM

                          @fireodo
                          So is it a bug in 2.7.2 that doesn't update unbound DNS?

                          pfSensePlus24.03 2U BareMetal Asrock Industrial IMB-X1314MicroATX
                          CPU: i7-13700@5.2GHz, RAM:32GB ECC, n°2 Samsung 870EVO SATA 2.5” SSD 1TB (ZFS) Raid1
                          n°3 Intel i225-LM 2500/1000/100Mbps, n°1 NIC Intel i350-T4V2 10/100/1000 Mbps 4*GLAN, n°1 Intel X520-DA2

                          F 1 Reply Last reply Jun 6, 2024, 8:47 AM Reply Quote 0
                          • F
                            fireodo @Unoptanio
                            last edited by fireodo Jun 6, 2024, 8:49 AM Jun 6, 2024, 8:47 AM

                            @Unoptanio said in Problem with DNS resolver:

                            So is it a bug in 2.7.2 that doesn't update unbound DNS?

                            No thats not a bug - if some changes where needed in unbound that occure AFTER release of 2.7.2 thats the only way to handle it - as far as I know!

                            PS.: Is unbound still restarting?

                            Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
                            SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
                            pfsense 2.7.2 CE
                            Packages: Apcupsd Cron Iftop Iperf LCDproc Nmap pfBlockerNG RRD_Summary Shellcmd Snort Speedtest System_Patches.

                            1 Reply Last reply Reply Quote 0
                            • U
                              Unoptanio @fireodo
                              last edited by Unoptanio Jun 6, 2024, 8:51 AM Jun 6, 2024, 8:50 AM

                              @fireodo

                              during my lunch break in about two hours I will reboot the system

                              pfSensePlus24.03 2U BareMetal Asrock Industrial IMB-X1314MicroATX
                              CPU: i7-13700@5.2GHz, RAM:32GB ECC, n°2 Samsung 870EVO SATA 2.5” SSD 1TB (ZFS) Raid1
                              n°3 Intel i225-LM 2500/1000/100Mbps, n°1 NIC Intel i350-T4V2 10/100/1000 Mbps 4*GLAN, n°1 Intel X520-DA2

                              F 1 Reply Last reply Jun 6, 2024, 8:53 AM Reply Quote 0
                              • F
                                fireodo @Unoptanio
                                last edited by Jun 6, 2024, 8:53 AM

                                @Unoptanio said in Problem with DNS resolver:

                                during my lunch break in about two hours I will reboot the system

                                👍

                                Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
                                SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
                                pfsense 2.7.2 CE
                                Packages: Apcupsd Cron Iftop Iperf LCDproc Nmap pfBlockerNG RRD_Summary Shellcmd Snort Speedtest System_Patches.

                                U 1 Reply Last reply Jun 6, 2024, 11:09 AM Reply Quote 0
                                • F
                                  fireodo @darcey
                                  last edited by Jun 6, 2024, 9:01 AM

                                  @darcey said in Problem with DNS resolver:

                                  When might it pull in the updated package, other than explicit upgrade via the cmdline?

                                  See my answer with the script inside - this kind of upgrade you have to do manually.

                                  Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
                                  SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
                                  pfsense 2.7.2 CE
                                  Packages: Apcupsd Cron Iftop Iperf LCDproc Nmap pfBlockerNG RRD_Summary Shellcmd Snort Speedtest System_Patches.

                                  D 1 Reply Last reply Jun 6, 2024, 9:04 AM Reply Quote 0
                                  • D
                                    darcey @fireodo
                                    last edited by Jun 6, 2024, 9:04 AM

                                    @fireodo Thanks, I'd completely forgotten about this. It seems on my system, unbound and curl have updates available.
                                    Still I think I am going to leave it as is as things are running very smoothly for me of late.

                                    F 1 Reply Last reply Jun 6, 2024, 9:08 AM Reply Quote 0
                                    • F
                                      fireodo @darcey
                                      last edited by fireodo Jun 6, 2024, 9:08 AM Jun 6, 2024, 9:08 AM

                                      @darcey said in Problem with DNS resolver:

                                      Still I think I am going to leave it as is as things are running very smoothly for me of late.

                                      Never change a running system ... old wisdom 😀
                                      (curl has a security issue so I recommend to upgrade)

                                      Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
                                      SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
                                      pfsense 2.7.2 CE
                                      Packages: Apcupsd Cron Iftop Iperf LCDproc Nmap pfBlockerNG RRD_Summary Shellcmd Snort Speedtest System_Patches.

                                      1 Reply Last reply Reply Quote 1
                                      • U
                                        Unoptanio @fireodo
                                        last edited by Jun 6, 2024, 11:09 AM

                                        @fireodo

                                        After restart system

                                        login-to-view

                                        pfSensePlus24.03 2U BareMetal Asrock Industrial IMB-X1314MicroATX
                                        CPU: i7-13700@5.2GHz, RAM:32GB ECC, n°2 Samsung 870EVO SATA 2.5” SSD 1TB (ZFS) Raid1
                                        n°3 Intel i225-LM 2500/1000/100Mbps, n°1 NIC Intel i350-T4V2 10/100/1000 Mbps 4*GLAN, n°1 Intel X520-DA2

                                        G F 2 Replies Last reply Jun 6, 2024, 11:15 AM Reply Quote 0
                                        • G
                                          Gertjan @Unoptanio
                                          last edited by Jun 6, 2024, 11:15 AM

                                          @Unoptanio

                                          That's unbound in permanent restart mode !
                                          You can stop that now, as the test succeeded.

                                          To stop the testing :
                                          Uncheck :

                                          login-to-view

                                          Save, and Apply.

                                          ( I'm trying a new solution to a 10+ year old question )

                                          No "help me" PM's please. Use the forum, the community will thank you.
                                          Edit : and where are the logs ??

                                          U 1 Reply Last reply Jun 6, 2024, 12:19 PM Reply Quote 1
                                          21 out of 64
                                          • First post
                                            21/64
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.