[Solved] Requests Timing Out Unbound DNS Resolver

Joshdw

Any ideas please? I am not sure how to troubleshoot this. Thanks in advance!

BBcan177

In the IPv4 tab try to remove that Youtube block list and see what that does…. I also heard that Level3 was having issues, just can't remember what day that was exactly... Run a Force Reload - ALL after that...

Anything that is blocked via IP/DNSBL will show in the Alerts Tab... So you can review those events...
Also increase the pfSense Resolver "Log Verbosity" to "2", and review the resolver.log for additional clues...

Joshdw

@BBcan177:

In the IPv4 tab try to remove that Youtube block list and see what that does…. I also heard that Level3 was having issues, just can't remember what day that was exactly... Run a Force Reload - ALL after that...

Anything that is blocked via IP/DNSBL will show in the Alerts Tab... So you can review those events...
Also increase the pfSense Resolver "Log Verbosity" to "2", and review the resolver.log for additional clues...

Heya, thank you for the reply! Also thanks for creating pfblocker, seems like it must have been a lot of time to create such a script.

I removed both those lists and forced a reload. I think DNSBL has never worked for me for some reason, the process never shows as started on the dashboard, when I try to start it it just loads and does nothing.
DNSBL.log shows Log file is empty or does not exist.

I did change the log verbosity to 2 and tried following it but didn't really see anything out of place.

Alerts: https://i.imgur.com/0XT4ba2.png
Dashboard: https://i.imgur.com/blLOXYd.png
resolver.log: https://i.imgur.com/E3KvhP8.png

BBcan177

@Joshdw:

@BBcan177:

In the IPv4 tab try to remove that Youtube block list and see what that does…. I also heard that Level3 was having issues, just can't remember what day that was exactly... Run a Force Reload - ALL after that...

Anything that is blocked via IP/DNSBL will show in the Alerts Tab... So you can review those events...
Also increase the pfSense Resolver "Log Verbosity" to "2", and review the resolver.log for additional clues...

Heya, thank you for the reply! Also thanks for creating pfblocker, seems like it must have been a lot of time to create such a script.

I removed both those lists and forced a reload. I think DNSBL has never worked for me for some reason, the process never shows as started on the dashboard, when I try to start it it just loads and does nothing.
DNSBL.log shows Log file is empty or does not exist.

DNSBL will not function if the service is not running… First need to fix that...

Run this from the shell and see if it shows any errors?

/usr/local/etc/rc.d/dnsbl.sh restart

Joshdw

@BBcan177:

@Joshdw:

@BBcan177:

In the IPv4 tab try to remove that Youtube block list and see what that does…. I also heard that Level3 was having issues, just can't remember what day that was exactly... Run a Force Reload - ALL after that...

Anything that is blocked via IP/DNSBL will show in the Alerts Tab... So you can review those events...
Also increase the pfSense Resolver "Log Verbosity" to "2", and review the resolver.log for additional clues...

Heya, thank you for the reply! Also thanks for creating pfblocker, seems like it must have been a lot of time to create such a script.

I removed both those lists and forced a reload. I think DNSBL has never worked for me for some reason, the process never shows as started on the dashboard, when I try to start it it just loads and does nothing.
DNSBL.log shows Log file is empty or does not exist.

DNSBL will not function if the service is not running… First need to fix that...

Run this from the shell and see if it shows any errors?
/usr/local/etc/rc.d/dnsbl.sh restart

Getting the following messages:

2018-01-06 17:37:33: (configfile.c.59) Warning: please add "mod_openssl" to server.modules list in lighttpd.conf.  A future release of lighttpd 1.4.x *will not* automatically load mod_openssl and lighttpd *will not* use SSL/TLS where your lighttpd.conf contains ssl.* directives
2018-01-06 17:37:33: (network.c.316) can't bind to socket: 0.0.0.0:8443 Address already in use

BBcan177

Lighttpd changed its OpenSSL integration in the last update…

Edit this file and add the part in red:
/var/unbound/pfb_dnsbl_lighty.conf

From:
server.modules = ( "mod_access", "mod_accesslog", "mod_fastcgi", "mod_rewrite" )

To:
server.modules = ( "mod_access", "mod_accesslog", "mod_fastcgi", "mod_rewrite", "mod_openssl" )

Joshdw

@BBcan177:

Lighttpd changed its OpenSSL integration in the last update…

Edit this file and add the part in red:
/var/unbound/pfb_dnsbl_lighty.conf

From:
server.modules = ( "mod_access", "mod_accesslog", "mod_fastcgi", "mod_rewrite" )

To:
server.modules = ( "mod_access", "mod_accesslog", "mod_fastcgi", "mod_rewrite", "mod_openssl" )

I made the changes, but still getting the same error:

2018-01-06 21:15:26: (network.c.316) can't bind to socket: 0.0.0.0:8443 Address already in use

BBcan177

/usr/local/etc/rc.d/dnsbl.sh stop
/usr/local/etc/rc.d/dnsbl.sh start

Failing that just reboot and see if that clears it…

Joshdw

@BBcan177:

/usr/local/etc/rc.d/dnsbl.sh stop
/usr/local/etc/rc.d/dnsbl.sh start
Failing that just reboot and see if that clears it…

Tried those commands, getting the same error. Rebooted, same error.

Reinstalled package, still persisting :( Thanks for helping me so far, I'm clueless.

Joshdw

Adding an update.

BBcan was kind enough to help me via teamviewer.
Solution to my issues were to remove lightsquid package, as well as changing the SSL Listening port under pfBlocker -> DNSBL Configuration.

Thank you very much!

DaReaLDeviL

Thank you for sharing. Had the same problem with a very slow dns and changing the default.

But in the dns custom config I put:

server: include: /var/unbound/pfb_dnsbl.*conf
server: private-domain: "plex.direct"

and I don't get the plex server running out of the network like before without dnsbl… any advice?