Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    [Solved] Requests Timing Out Unbound DNS Resolver

    Scheduled Pinned Locked Moved General pfSense Questions
    12 Posts 3 Posters 3.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • BBcan177B Offline
      BBcan177 Moderator
      last edited by

      In the IPv4 tab try to remove that Youtube block list and see what that does…. I also heard that Level3 was having issues, just can't remember what day that was exactly... Run a Force Reload - ALL after that...

      Anything that is blocked via IP/DNSBL will show in the Alerts Tab... So you can review those events...
      Also increase the pfSense Resolver "Log Verbosity" to "2", and review the resolver.log for additional clues...

      "Experience is something you don't get until just after you need it."

      Website: http://pfBlockerNG.com
      Twitter: @BBcan177  #pfBlockerNG
      Reddit: https://www.reddit.com/r/pfBlockerNG/new/

      1 Reply Last reply Reply Quote 0
      • J Offline
        Joshdw
        last edited by

        @BBcan177:

        In the IPv4 tab try to remove that Youtube block list and see what that does…. I also heard that Level3 was having issues, just can't remember what day that was exactly... Run a Force Reload - ALL after that...

        Anything that is blocked via IP/DNSBL will show in the Alerts Tab... So you can review those events...
        Also increase the pfSense Resolver "Log Verbosity" to "2", and review the resolver.log for additional clues...

        Heya, thank you for the reply! Also thanks for creating pfblocker, seems like it must have been a lot of time to create such a script.

        I removed both those lists and forced a reload. I think DNSBL has never worked for me for some reason, the process never shows as started on the dashboard, when I try to start it it just loads and does nothing.
        DNSBL.log shows Log file is empty or does not exist.

        I did change the log verbosity to 2 and tried following it but didn't really see anything out of place.

        Alerts: https://i.imgur.com/0XT4ba2.png
        Dashboard: https://i.imgur.com/blLOXYd.png
        resolver.log: https://i.imgur.com/E3KvhP8.png

        1 Reply Last reply Reply Quote 0
        • BBcan177B Offline
          BBcan177 Moderator
          last edited by

          @Joshdw:

          @BBcan177:

          In the IPv4 tab try to remove that Youtube block list and see what that does…. I also heard that Level3 was having issues, just can't remember what day that was exactly... Run a Force Reload - ALL after that...

          Anything that is blocked via IP/DNSBL will show in the Alerts Tab... So you can review those events...
          Also increase the pfSense Resolver "Log Verbosity" to "2", and review the resolver.log for additional clues...

          Heya, thank you for the reply! Also thanks for creating pfblocker, seems like it must have been a lot of time to create such a script.

          I removed both those lists and forced a reload. I think DNSBL has never worked for me for some reason, the process never shows as started on the dashboard, when I try to start it it just loads and does nothing.
          DNSBL.log shows Log file is empty or does not exist.

          DNSBL will not function if the service is not running… First need to fix that...

          Run this from the shell and see if it shows any errors?

          /usr/local/etc/rc.d/dnsbl.sh restart
          

          "Experience is something you don't get until just after you need it."

          Website: http://pfBlockerNG.com
          Twitter: @BBcan177  #pfBlockerNG
          Reddit: https://www.reddit.com/r/pfBlockerNG/new/

          1 Reply Last reply Reply Quote 0
          • J Offline
            Joshdw
            last edited by

            @BBcan177:

            @Joshdw:

            @BBcan177:

            In the IPv4 tab try to remove that Youtube block list and see what that does…. I also heard that Level3 was having issues, just can't remember what day that was exactly... Run a Force Reload - ALL after that...

            Anything that is blocked via IP/DNSBL will show in the Alerts Tab... So you can review those events...
            Also increase the pfSense Resolver "Log Verbosity" to "2", and review the resolver.log for additional clues...

            Heya, thank you for the reply! Also thanks for creating pfblocker, seems like it must have been a lot of time to create such a script.

            I removed both those lists and forced a reload. I think DNSBL has never worked for me for some reason, the process never shows as started on the dashboard, when I try to start it it just loads and does nothing.
            DNSBL.log shows Log file is empty or does not exist.

            DNSBL will not function if the service is not running… First need to fix that...

            Run this from the shell and see if it shows any errors?

            /usr/local/etc/rc.d/dnsbl.sh restart
            

            Getting the following messages:

            2018-01-06 17:37:33: (configfile.c.59) Warning: please add "mod_openssl" to server.modules list in lighttpd.conf.  A future release of lighttpd 1.4.x *will not* automatically load mod_openssl and lighttpd *will not* use SSL/TLS where your lighttpd.conf contains ssl.* directives
            2018-01-06 17:37:33: (network.c.316) can't bind to socket: 0.0.0.0:8443 Address already in use
            
            

            1 Reply Last reply Reply Quote 0
            • BBcan177B Offline
              BBcan177 Moderator
              last edited by

              Lighttpd changed its OpenSSL integration in the last update…

              Edit this file and add the part in red:
                  /var/unbound/pfb_dnsbl_lighty.conf

              From:
              server.modules                  = ( "mod_access", "mod_accesslog", "mod_fastcgi", "mod_rewrite" )

              To:
              server.modules                  = ( "mod_access", "mod_accesslog", "mod_fastcgi", "mod_rewrite", "mod_openssl" )

              "Experience is something you don't get until just after you need it."

              Website: http://pfBlockerNG.com
              Twitter: @BBcan177  #pfBlockerNG
              Reddit: https://www.reddit.com/r/pfBlockerNG/new/

              1 Reply Last reply Reply Quote 0
              • J Offline
                Joshdw
                last edited by

                @BBcan177:

                Lighttpd changed its OpenSSL integration in the last update…

                Edit this file and add the part in red:
                    /var/unbound/pfb_dnsbl_lighty.conf

                From:
                server.modules                  = ( "mod_access", "mod_accesslog", "mod_fastcgi", "mod_rewrite" )

                To:
                server.modules                  = ( "mod_access", "mod_accesslog", "mod_fastcgi", "mod_rewrite", "mod_openssl" )

                I made the changes, but still getting the same error:

                2018-01-06 21:15:26: (network.c.316) can't bind to socket: 0.0.0.0:8443 Address already in use
                
                

                1 Reply Last reply Reply Quote 0
                • BBcan177B Offline
                  BBcan177 Moderator
                  last edited by

                  /usr/local/etc/rc.d/dnsbl.sh stop
                  /usr/local/etc/rc.d/dnsbl.sh start
                  

                  Failing that just reboot and see if that clears it…

                  "Experience is something you don't get until just after you need it."

                  Website: http://pfBlockerNG.com
                  Twitter: @BBcan177  #pfBlockerNG
                  Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                  1 Reply Last reply Reply Quote 0
                  • J Offline
                    Joshdw
                    last edited by

                    @BBcan177:

                    /usr/local/etc/rc.d/dnsbl.sh stop
                    /usr/local/etc/rc.d/dnsbl.sh start
                    

                    Failing that just reboot and see if that clears it…

                    Tried those commands, getting the same error. Rebooted, same error.

                    Reinstalled package, still persisting :( Thanks for helping me so far, I'm clueless.

                    1 Reply Last reply Reply Quote 0
                    • J Offline
                      Joshdw
                      last edited by

                      Adding an update.

                      BBcan was kind enough to help me via teamviewer.
                      Solution to my issues were to remove lightsquid package, as well as changing the SSL Listening port under pfBlocker -> DNSBL Configuration.

                      Thank you very much!

                      1 Reply Last reply Reply Quote 0
                      • DaReaLDeviLD Offline
                        DaReaLDeviL
                        last edited by

                        Thank you for sharing. Had the same problem with a very slow dns and changing the default.

                        But in the dns custom config I put:

                        server: include: /var/unbound/pfb_dnsbl.*conf
                        server: private-domain: "plex.direct"

                        and I don't get the plex server running out of the network like before without dnsbl… any advice?

                        VM PFSense 2.4.3 (amd64) on Dell PowerEdge T410
                        Xeon E5620 @ 2.40GHz 2 CPUs: 4GB Ram: 60GB Disk
                        ISP (MNet) 1xModem (Vigor 130) 1xWan, 3xLan (PFSense)

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.