Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Unbound stop working on 127.0.0.1 after 2.5.1 upgrade

    Scheduled Pinned Locked Moved General pfSense Questions
    17 Posts 7 Posters 2.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • GertjanG
      Gertjan @juniper
      last edited by

      As in the other thread :
      The 'body' of the post proves the subject wrong.

      It's more like :
      Anything that needs / uses localhost 127.0.0.1 fails.

      Anything can be many things. So, most probably, everything that uses local host fails, so it really looks like "its 127.0.0.1 that fails".

      A nasty issue for sure. But - for ones ^^, not unbound related.
      I mean, even "ping me" doesn't work anymore. That's .... unheard.

      All this IMHO of course.

      Btw : who's gona run several instances if pfSense on different type of machines so it gets known what 'hardware' is needed to trigger this issue.
      And also : as setting up pfSense takes 5 minutes : reset to all default. NO user settings - no packages . Just pfSense 'from the shelves' : Does the issue persist ?

      No "help me" PM's please. Use the forum, the community will thank you.
      Edit : and where are the logs ??

      J 2 Replies Last reply Reply Quote 1
      • J
        juniper @Gertjan
        last edited by juniper

        @gertjan not only 127.0.0.1....

        problem is related to all interfaces... and i use a kvm virtual machine as usual.

        1 Reply Last reply Reply Quote 0
        • J
          juniper @Gertjan
          last edited by

          @gertjan ok i have some new informations.

          Problem appear if i insert 127.0.0.1 on GENERAL SETUP---DNS Server Settings

          I use to have there 127.0.0.1 if pfsense is a dns resolver.

          If i config with 127.0.0.1 GENERAL SETUP---DNS Server Settings as a default pfsense dns server there is the problem with interface lo0.

          S 1 Reply Last reply Reply Quote 1
          • S
            SashLi @juniper
            last edited by SashLi

            @juniper I tested it already without the 127.0.0.1 and get the same "problem". If I ask for a host dns recored that has a Host Overrides in the unbound setting it will resolve to the wrong IP. If I try to resolve it with the GUI DNS Lookup tool in pfsense I get a "No response" in the result. The external DNS servers are resolving correctly.

            Only the 127.0.0.1 is not resolving.
            @juniper Did you get a result for the resolve via the localhost ?

            J 1 Reply Last reply Reply Quote 0
            • J
              juniper @SashLi
              last edited by juniper

              @sashli you have to change GENERAL SETUP---DNS Server Settings with an external server and after reboot pfsense server.

              After you can ping 127.0.0.1 and unbound reply to 127.0.0.1 query

              but if you change pfsense general setup dns doesn't work anymore.

              S 1 Reply Last reply Reply Quote 1
              • S
                SashLi @juniper
                last edited by

                @juniper can confirm removing the 127.0.0.1 AND restarting did the trick . It did not work just to remove the DNS Server from the configuatuion.

                Now the dig command return to operate / resolve as normal. Many thanks to all and @juniper

                dig @127.0.0.1 apple.com +short
                17.253.144.10
                
                1 Reply Last reply Reply Quote 0
                • S
                  SashLi
                  last edited by

                  Just as a summary :

                  • I think this was in pfsense before they introduced the option in the General Setup that the localhost DNS setting will be used as drop down, the locahost was set in the DNS Server as 127.0.0.1
                  • After updates to 2.5.1 things go wrong if you have the 127.0.0.1 in the General Setup , DNS Server Settings set as additional DNS Server to the option of " DNS Resolution Behavior " where you can already set that the locahost should be in use.
                  • If you did the settings wrong here, unbound will not be able to resolve and other effect I saw now on 2.5.0 that sometimes DNS resolve fails without reason

                  dns-resolver-solution.png

                  GertjanG 1 Reply Last reply Reply Quote 2
                  • GertjanG
                    Gertjan @SashLi
                    last edited by

                    Exact.

                    The bad news : this is not good.
                    The good news : it's a non issue, as adding 127.0.0.1 is not needed - it's already there.

                    I just added the missing ::1 (we all prefer IPv6, right ?) and that doesn't 'break' the localhost.

                    Now I have this :

                    6934444f-6569-4bf1-b9be-b24c579f3d94-image.png
                    and it works.

                    No "help me" PM's please. Use the forum, the community will thank you.
                    Edit : and where are the logs ??

                    S 1 Reply Last reply Reply Quote 0
                    • S
                      SteveITS Galactic Empire @Gertjan
                      last edited by

                      See if a reboot fixes it like this post.

                      Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                      When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                      Upvote 👍 helpful posts!

                      MikeV7896M 1 Reply Last reply Reply Quote 0
                      • MikeV7896M
                        MikeV7896 @SteveITS
                        last edited by MikeV7896

                        After removing 127.0.0.1 from the server list (since it's already covered by the dropdown further down) and rebooting, localhost DNS resolution is working again.

                        Of interesting note about this though... the Status > DNS Resolver page showed no statistics or data, even though resolution for other hosts on my networks was occurring without issue. But now that I made the above change, all appears to be working.

                        The S in IOT stands for Security

                        GertjanG 1 Reply Last reply Reply Quote 0
                        • GertjanG
                          Gertjan @MikeV7896
                          last edited by

                          @virgiliomi said in Unbound stop working on 127.0.0.1 after 2.5.1 upgrade:

                          the Status > DNS Resolver page showed no statistics or data

                          Changing the DNS settings restart the Resolver, clearing all stats and cache.
                          That normal.

                          No "help me" PM's please. Use the forum, the community will thank you.
                          Edit : and where are the logs ??

                          1 Reply Last reply Reply Quote 0
                          • G
                            garyn
                            last edited by garyn

                            I had this same issue. I didn't find this thread until this morning and adding ::1 did not work for me. However, what I found yesterday that did work was removing 127.0.0.1 and adding my router's local LAN address, in my case 192.168.2.1.

                            unbound-issue-apr2021.PNG

                            Cool_CoronaC 1 Reply Last reply Reply Quote 0
                            • Cool_CoronaC
                              Cool_Corona @garyn
                              last edited by

                              @garyn Remove everything in DNS and reboot.

                              It will work afterwards with no records.

                              G 1 Reply Last reply Reply Quote 0
                              • G
                                garyn @Cool_Corona
                                last edited by

                                @cool_corona I'll try it, thanks!

                                1 Reply Last reply Reply Quote 0
                                • First post
                                  Last post
                                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.