Could not resolve host when update DNSBL feeds

[Hurkamurka]

Hello Forum!

I just set DNS over TLS following this guide: link. Copied the given lines to custom options, so now my Custom option lokks like this:

server:
include: /var/unbound/pfb_dnsbl.*conf
forward-zone:
name: "."
forward-ssl-upstream: yes
forward-addr: 37.252.185.232@853

I'm using a DNS server from Austria, and running the pfBlockerNG devel version (latest). I pasted the DNS server IP under General Setup --> DNS Server Address, and set Gateway as WAN_PPPOE, enabled DNSSEC, DNS Server Override is unchecked, and Disable DNS Forwarder is checked.

I have these feeds enabled:

• EasyList feeds
• ADs
• Malicious
• Cryptojackers
• Abuse_C2
• hpHosts
• Microsoft Hosts containing 4 host lists from github (3 Crazy Max's lists and one fron Jason Hill)

Wanted to whitelist some domains, but when i hit update, all of the feeds says "Could not resolve host when update". But if i copy an address, like https://talosintelligence.com, in the browser it is resolved.

I know i made something or missed something, but i don't know what. Can anybody help me out?

Thanks any help anyone can provide to resolve this issue!

[Gertjan]

@Hurkamurka said in Could not resolve host when update DNSBL feeds:

I just set DNS over TLS following this guide: link. C....

Wait .... that's old info.
As the blog states, it's build in now. See https://www.netgate.com/blog/pfsense-2-4-4-release-now-available.htmlv
You are using 2.4.4-p3, right ?

[Hurkamurka]

Hey! Thanks for come by. Yes, i run the latest pfSense.

The extra info about the custom lines was hidden way too at the end of the blog, but i've found it after my post, and now i changed my settings according to that.

Strange thing, but changing the DNS server to UncensoredDNS, seems now everything working fine. I think i will let Applied Privacy know about this behaviour.

Maybe do you have a clue why could i resolve the hostname in the browser, but not in the DNSBL feeds update?