Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Unbound can't start after snapshot update (new thread!)

    Scheduled Pinned Locked Moved pfSense Packages
    41 Posts 5 Posters 20.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • I
      iFloris
      last edited by

      Hello Wagonza,

      Unbound still gives me errors in the log but works with the forwards.
      Adding the forwards one by one and reloading unbound in the ssh-console has helped unbound start properly.

      Thanks for all your help!

      one layer of information
      removed

      1 Reply Last reply Reply Quote 0
      • W
        wagonza
        last edited by

        @iFloris:

        Hello Wagonza,

        Unbound still gives me errors in the log but works with the forwards.
        Adding the forwards one by one and reloading unbound in the ssh-console has helped unbound start properly.

        Thanks for all your help!

        What error did you see in the logs, the same timeout one? Can you do me a favour please and pm me the xml of the unbound section of your config.xml?

        Thanks

        Follow me on twitter http://twitter.com/wagonza
        http://www.thepackethub.co.za

        1 Reply Last reply Reply Quote 0
        • I
          iFloris
          last edited by

          The very same. I will send you the unbound section(s) of my config.xml.

          Edit: Sent.

          one layer of information
          removed

          1 Reply Last reply Reply Quote 0
          • W
            wagonza
            last edited by

            Thanks, got it - will go through it a little later and let you know.

            Follow me on twitter http://twitter.com/wagonza
            http://www.thepackethub.co.za

            1 Reply Last reply Reply Quote 0
            • W
              wagonza
              last edited by

              Problem sorted with host over rides that have empty host values. So just reinstall the package. Otherwise any other problems, please open up a new thread.

              Follow me on twitter http://twitter.com/wagonza
              http://www.thepackethub.co.za

              1 Reply Last reply Reply Quote 0
              • I
                iFloris
                last edited by

                Having set some v6 forwards yesterday, I can confirm that the new fixes work as expected.
                Thanks a lot wagonza!

                one layer of information
                removed

                1 Reply Last reply Reply Quote 0
                • W
                  wagonza
                  last edited by

                  wicked! Only v6 ACLs now left…

                  Follow me on twitter http://twitter.com/wagonza
                  http://www.thepackethub.co.za

                  1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator
                    last edited by

                    Sweet!! ipv6 ACLs are NEXT ;)

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                    1 Reply Last reply Reply Quote 0
                    • W
                      wagonza
                      last edited by

                      Finally committed support for IPv6 acls  :P I have also updated the package to latest Unbound version 1.4.13. So give it a couple of hours while the package builder is building the new port.

                      Follow me on twitter http://twitter.com/wagonza
                      http://www.thepackethub.co.za

                      1 Reply Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator
                        last edited by

                        Sweet!  Can remove them from my custom options section, which is how I have been adding them now.

                        See it listed already, installing now

                        Looks like you forgot a _ in the allow_snoop

                        php: /unbound_acls.php: The command '/usr/local/sbin/unbound-control start' returned exit code '1', the output was '/usr/local/etc/unbound/unbound.conf:67: error: unknown keyword 'snoop' /usr/local/etc/unbound/unbound.conf:68: error: unknown keyword 'snoop' /usr/local/etc/unbound/unbound.conf:69: error: unknown keyword 'snoop' /usr/local/etc/unbound/unbound.conf:70: error: unknown keyword 'snoop' read /usr/local/etc/unbound/unbound.conf failed: 4 errors in configuration file [1317328224] unbound[30144:0] fatal error: Could not read config file: /usr/local/etc/unbound/unbound.conf'

                        So I have an ACL that allows snoop, but in the .conf file its put in as "allow snoop" which killed my unbound now it can not start.  Trying to manually edit the ubound.conf now so I can get unbound to start.

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        1 Reply Last reply Reply Quote 0
                        • W
                          wagonza
                          last edited by

                          Cool let me know if you get any problems.

                          Follow me on twitter http://twitter.com/wagonza
                          http://www.thepackethub.co.za

                          1 Reply Last reply Reply Quote 0
                          • johnpozJ
                            johnpoz LAYER 8 Global Moderator
                            last edited by

                            just edited my last post – looks like a problem ;)

                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                            If you get confused: Listen to the Music Play
                            Please don't Chat/PM me for help, unless mod related
                            SG-4860 24.11 | Lab VMs 2.8, 24.11

                            1 Reply Last reply Reply Quote 0
                            • W
                              wagonza
                              last edited by

                              bah! and i did test that specifically. hang 5.

                              Follow me on twitter http://twitter.com/wagonza
                              http://www.thepackethub.co.za

                              1 Reply Last reply Reply Quote 0
                              • johnpozJ
                                johnpoz LAYER 8 Global Moderator
                                last edited by

                                ok changed to allow vs allow snoop and looks good

                                from conf file
                                #allow
                                access-control: 192.168.1.0/24 allow
                                access-control: 10.0.200.0/24 allow
                                access-control: 127.0.0.0/8 allow
                                access-control: 2001:470:1f11:b85:0:0:0:0/64 allow

                                changed it to allow snoop in dropdown and get this.

                                access-control: 192.168.1.0/24 allow snoop
                                access-control: 10.0.200.0/24 allow snoop
                                access-control: 127.0.0.0/8 allow snoop
                                access-control: 2001:470:1f11:b85:0:0:0:0/64 allow snoop

                                missing the _ looks like to me.

                                An intelligent man is sometimes forced to be drunk to spend time with his fools
                                If you get confused: Listen to the Music Play
                                Please don't Chat/PM me for help, unless mod related
                                SG-4860 24.11 | Lab VMs 2.8, 24.11

                                1 Reply Last reply Reply Quote 0
                                • W
                                  wagonza
                                  last edited by

                                  Yeah 100% correct - fixed. So just update.

                                  Follow me on twitter http://twitter.com/wagonza
                                  http://www.thepackethub.co.za

                                  1 Reply Last reply Reply Quote 0
                                  • johnpozJ
                                    johnpoz LAYER 8 Global Moderator
                                    last edited by

                                    Sweet thanks!!  Looks like same build number, just reinstall or will you be pushing say 1.4.13_01

                                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                                    If you get confused: Listen to the Music Play
                                    Please don't Chat/PM me for help, unless mod related
                                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                                    1 Reply Last reply Reply Quote 0
                                    • W
                                      wagonza
                                      last edited by

                                      Nah same build number - I didnt increase the version number for this change.

                                      Follow me on twitter http://twitter.com/wagonza
                                      http://www.thepackethub.co.za

                                      1 Reply Last reply Reply Quote 0
                                      • johnpozJ
                                        johnpoz LAYER 8 Global Moderator
                                        last edited by

                                        looks good now, thanks!

                                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                                        If you get confused: Listen to the Music Play
                                        Please don't Chat/PM me for help, unless mod related
                                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                                        1 Reply Last reply Reply Quote 0
                                        • First post
                                          Last post
                                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.