Setting a Domain Override in the DNS Resolver stops the service

Dicmo

@johnpoz Confirmed, the DNS resolver (unbound) is not running.

It goes back to running automatically when I delete the domain rewrite and apply the changes.

Also, checked from a computer connected locally and the dns does not resolve.

The pfSense version is 2.5.1.

johnpoz

And if you try and manually start it - it fails, any errors in the logs?

Not able to duplicate it.. So some piece of the puzzle is missing to why its doing it on your and not mine.

You could bump the verbosity up in the log, and see it shows you some info that could give a clue to what is going on.

edit: I am running 21.02.2, I could try firing up a 2.5.1 on a vm.. And see if I can duplicate the problem..

SashLi

@dicmo @johnpoz

Have a similar issue, after updating to 2.5.1 today the local unbound server stops working. I can see the starting service in the log

unbound 	6609 	[6609:0] info: start of service (unbound 1.13.1).

but unbound-control -c /var/unbound/unbound.conf status return

unbound-control[53604:0] error: connect: Can't assign requested address for 127.0.0.1 port 953

But service is showing the checkmark that it is running. What is really stange that running a netstat -l -n is showing that the DNS server is running

Active Internet connections
Proto Recv-Q Send-Q Local Address                                 Foreign Address                               
udp6       0      0 ::1.53                                        *.*
udp4       0      0 127.0.0.1.53                                  *.*

Any idea ?

johnpoz

@sashli said in Setting a Domain Override in the DNS Resolver stops the service:

Can't assign requested address for 127.0.0.1 port 953

Yeah with that, you have something on 953.. Do you also have the bind package installed.. This has been a known issue for long time that they like to use the same control port.

SashLi

@johnpoz

Nope, never installed BIND. I'm on this configuration with unbound since years now and never had any issues. Only have some host overrides in the config.

Only get it working when I use the option "use remote DNS Server, ignore local DNS" but I need some of the host overrides so I switched back to the other system with 2.5.0 at the moment.

So it is definitely an issue with the unbound

johnpoz

look to see if anything is running on 953, unbound is going to have problems if something is using 953. Maybe its not bind? But that errors says it couldn't use that port - for some reason..

SashLi

Just did it with manually changing the unbound control-interface config to 0.0.0.0 but for some reason I always get back with the same error.

Unbound is correcty starting and binding the ports but will not answer any requests

sockstat -4 -l | grep unbound
unbound  unbound    94120 4  udp4   192.168.1.1:53       *:*
unbound  unbound    94120 4  tcp4   192.168.1.1:53       *:*
unbound  unbound    94120 8  udp4   127.0.0.1:53          *:*
unbound  unbound    94120 9  tcp4   127.0.0.1:53          *:*
unbound  unbound    94120 14 tcp4   127.0.0.1:953         *:*

trying to run the control command gets back with the same error.

root: unbound-control -c /var/unbound/unbound.conf status

[1618467957] unbound-control[33867:0] error: connect: Can't assign requested address for 127.0.0.1 port 953

johnpoz

@sashli said in Setting a Domain Override in the DNS Resolver stops the service:

Can't assign requested address for 127.0.0.1 port 953

Are you running pfblocker?

See here
https://forum.netgate.com/post/822615

SashLi

@johnpoz Yes but no DSNBL function enabled. Already red that thread, so this can not be the answer but thanks a lot to share this

johnpoz

Do you have pfblocker enabled at all - turn it off.. Kill all your unbound instances..

Do you still have the same problem?