Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    DNS Resolver (unbound) / Can't change config

    Scheduled Pinned Locked Moved DHCP and DNS
    61 Posts 29 Posters 71.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • VeldkornetV
      Veldkornet
      last edited by

      I'm also having this problem. Setup pfSense from scratch on 2.3.3_p1.

      The below does indeed work once off, so I need to run it every time I change the configuration.

      mkdir /var/unbound/test/
      cp -ax /var/unbound/*.{key,pem} /var/unbound/test/
      

      Is there a bug logged for it already?

      1 Reply Last reply Reply Quote 0
      • F
        Fabio72
        last edited by

        For me the problem is gone away and I did nothing (neither reboot).
        After updating to 2.3.3-p1 everything is still working.

        But now is happening again on another site with a fresh new installation of a 2.3.3-p1  ???

        1 Reply Last reply Reply Quote 0
        • F
          Fabio72
          last edited by

          Ok, now I have the problem again.
          Sometimes happens and usually a reboot fixes it.

          1 Reply Last reply Reply Quote 0
          • M
            matsan
            last edited by

            Just want to chime in here. Starting to see this on my pfsense running 2.3.3-RELEASE-p1 (amd64)
            Configuration created from scratch so no "old crap" should be there. The workaround with mkdir and cp works.
            Reboot doesn't solve this.

            1 Reply Last reply Reply Quote 0
            • M
              maguilu
              last edited by

              So to Recap:

              • Reboots - DO NOT WORK

              • mkdir Test and cp config - Works once per saved change

              • move to forwarder, wipe unbound directory and return to resolver - ? ? ? ? ?

                Anymore suggestions

                This is the message I get when making any changes

                The following input errors were detected:
                The generated config file cannot be parsed by unbound. Please correct the following errors:
                /var/unbound/test/root.key: No such file or directory
                [1494245590] unbound-checkconf[4967:0] fatal error: auto-trust-anchor-file: "/var/unbound/test/root.key" does not exist in chrootdir /var/unbound
                

                I am running:

                2.3.4-RELEASE (amd64) 
                built on Wed May 03 15:13:29 CDT 2017 
                FreeBSD 10.3-RELEASE-p19 
                
                The system is on the latest version.
                

                HELP!!!

              1 Reply Last reply Reply Quote 0
              • M
                maguilu
                last edited by

                Let me add to my previous, DNS is resolving all local addresses and appears to be working correctly.
                But even if I attempt to make changes directly to the dhcp.conf, hostentries.conf or dhcpleases_entries.conf the changes to not persist after a process restart.

                So this unbound config validator issue I more spread than I thought and more annoying than willing to deal with.

                1 Reply Last reply Reply Quote 0
                • C
                  chris4916
                  last edited by

                  I'm facing this problem too, although not been able to clearly determine when and what triggers this.
                  Depending on DNS configuration (but what?), I get this same error message.
                  As far as I remember, occurred with all 2.3.x version (currently running 2.3.4)

                  I'm also facing problem with, if I'm not wrong, DNS stopping from time to time when DHCP registration is activated.

                  Weird  :(

                  Jah Olela Wembo: Les mots se muent en maux quand ils indisposent, agressent ou blessent.

                  1 Reply Last reply Reply Quote 0
                  • C
                    CuteBoi
                    last edited by

                    Created redmine ticket:

                    https://redmine.pfsense.org/issues/7600

                    Running this command lets me do it before each save:

                    echo 'mkdir /var/unbound/test; /usr/local/sbin/unbound-control-setup -d /var/unbound/test' | /usr/bin/su -m unbound
                    
                    1 Reply Last reply Reply Quote 0
                    • jimpJ
                      jimp Rebel Alliance Developer Netgate
                      last edited by

                      This is not a general problem that happens out of the box or with anything I have readily available. Something specific to your setups is causing this, but it's not clear yet what that is.

                      There must be some missing detail to reliably replicate it. Please compare other system settings and setup details, like what platform/architecture is in use (e.g. NanoBSD or full), if you have /var and /tmp in RAM disks, and anything else about the setup that might be different or unusual, especially any packages you have installed.

                      Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                      Need help fast? Netgate Global Support!

                      Do not Chat/PM for help!

                      1 Reply Last reply Reply Quote 0
                      • N
                        n3by
                        last edited by

                        I remember few days ago after clean install of 2.3.4, and right after I restored 2.3.2 config, unbound was down and did not wanted to start up until I deleted the line added by pfblocker…```
                        server:include: /var/unbound/pfb_dnsbl.conf

                        
                        Today I found unbound dead… and I blame wan lose connection that also triggered unbound death.
                        https://forum.pfsense.org/index.php?topic=131242.msg723850#msg723850
                        1 Reply Last reply Reply Quote 0
                        • Y
                          yarick123
                          last edited by

                          I have also just faced this problem on my 2.3.5-RELEASE-p1 (i386) nanobsd (2g). Interesting is, that adding Host Overrides does not trigger the problem, although it changes and saves DNS Resolver configuration.

                          1 Reply Last reply Reply Quote 0
                          • S
                            shlazzer
                            last edited by

                            Just ran into this on 2.3.4-RELEASE (amd64)

                            Haven't had a chance to try any of the suggestions earlier in the thread, but this is a relatively new box that hasn't been around long enough to have legacy configs. Has always been on a 2.3.x release.

                            A confirmed solution would be really helpful.

                            1 Reply Last reply Reply Quote 0
                            • Y
                              yarick123
                              last edited by

                              @Veldkornet:

                              …
                              The below does indeed work once off, so I need to run it every time I change the configuration.

                              mkdir /var/unbound/test/
                              cp -ax /var/unbound/*.{key,pem} /var/unbound/test/
                              

                              Is there a bug logged for it already?

                              works for me.

                              1 Reply Last reply Reply Quote 0
                              • C
                                compdoc
                                last edited by

                                This just happened to me, although my error was "/var/unbound/test/root.key" does not exist. I tried creating the test directory and copying the root.key there, but there was no change. I still couldn't save the settings for DNS Resolver.

                                However, I seemed to fix it by running the command: unbound-control-setup

                                I'd be interested to hear if this helped anyone else.

                                1 Reply Last reply Reply Quote 0
                                • GertjanG
                                  Gertjan
                                  last edited by

                                  This issue is known, as the thread implies.
                                  But 2.3.5 is old and fading out : 32 hardware is hard to find these days - some devices are kept artificially alive, mostly in museums.
                                  Consider the issue as closed.

                                  No "help me" PM's please. Use the forum, the community will thank you.
                                  Edit : and where are the logs ??

                                  C 1 Reply Last reply Reply Quote 0
                                  • C
                                    compdoc @Gertjan
                                    last edited by

                                    I am running 64 bit, 2.4.4-RELEASE-p1

                                    1 Reply Last reply Reply Quote 0
                                    • GertjanG
                                      Gertjan
                                      last edited by

                                      In that case, the issue is totally new - not related to what happened as described 2 years ago - with old pfSense versions.

                                      Maybe some left-overs from an ancient install ?
                                      Did you install 2.4.4-P1 from scratch, or did you upgrade from an older version ?

                                      No "help me" PM's please. Use the forum, the community will thank you.
                                      Edit : and where are the logs ??

                                      1 Reply Last reply Reply Quote 0
                                      • Z
                                        zimt
                                        last edited by

                                        very same issue here, brand new hardware, latest version 2.4.4 from scratch, no import of former config

                                        1 Reply Last reply Reply Quote 0
                                        • johnpozJ
                                          johnpoz LAYER 8 Global Moderator
                                          last edited by

                                          Same issue? From a thread from 2 years ago... Please post your exact error your seeing.. What else your running other than clean out of the box pfsense.

                                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                                          If you get confused: Listen to the Music Play
                                          Please don't Chat/PM me for help, unless mod related
                                          SG-4860 24.11 | Lab VMs 2.8, 24.11

                                          1 Reply Last reply Reply Quote 0
                                          • Z
                                            zimt
                                            last edited by

                                            When I try to change any settings in unbound I get this error message, can't even disable it :

                                            The following input errors were detected:
                                            The generated config file cannot be parsed by unbound. Please correct the following errors:
                                            /var/unbound/test/root.key: No such file or directory
                                            [1550262886] unbound-checkconf[60539:0] fatal error: auto-trust-anchor-file: "/var/unbound/test/root.key" does not exist in chrootdir /var/unbound
                                            

                                            My install worked fine for maybe two weeks, this issue just appeared. Not sure what this is related to.
                                            I did disable pfb_dnsbl and pfb_filter but that didn't solve the issue. Also all the other tricks mentioned in this thread didn't work for me. Didn't try to reboot yet, hopefully tonight...

                                            Here are all the services running:

                                            Service 	Description 	
                                            avahi 	Avahi mDNS/DNS-SD daemon 	
                                            dhcpd 	DHCP Service 	
                                            dpinger 	Gateway Monitoring Daemon 	
                                            ntopng 	ntopng Network Traffic Monitor 	
                                            ntpd 	NTP clock sync 	
                                            openvpn 	OpenVPN server: home 	
                                            pfb_dnsbl 	pfBlockerNG DNSBL service 	
                                            pfb_filter 	pfBlockerNG firewall filter service 	
                                            radvd 	Router Advertisement Daemon 	
                                            snort 	Snort IDS/IPS Daemon 	
                                            sshd 	Secure Shell Daemon 	
                                            syslogd 	System Logger Daemon 	
                                            telegraf 	Telegraf daemon 	
                                            unbound 	DNS Resolver
                                            
                                            BBcan177B 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.