Fetching package: connection reset by peer

stephenw10 · Sep 13, 2020, 4:40 PM

After your restored your config I assume? The default install resolves as expected?

float · Sep 13, 2020, 4:41 PM

I didn't restore my config. Default install doesn't resolve.

DaddyGo · Sep 13, 2020, 4:52 PM

@float said in Fetching package: connection reset by peer:

Default install doesn't resolve.

Can you only connect to your ISP's modem / router?

float · Sep 13, 2020, 4:58 PM

I can resolve any host on pfsense, but not on the clients after pfsense. Pfsense is making the connection with the modem.

DaddyGo · Sep 13, 2020, 5:54 PM

@float said in Fetching package: connection reset by peer:

Pfsense is making the connection with the modem.

I was just wondering if you don't have some crazy ISP filtering ...

So,

Are the interfaces configured correctly in Unbound?

and

do clients' DNS point to pfSense?

stephenw10 · Sep 13, 2020, 5:18 PM

Can you ping out from clients by IP?

Is Unbound actually running? Any errors in the resolver log?

Steve

float · Sep 13, 2020, 5:25 PM

Ok, I found the error. Selecting "ALL" in "Network interfaces" doesn't work, but when I select "LAN" and "localhost" it works.

stephenw10 · Sep 13, 2020, 5:25 PM

@float said in Fetching package: connection reset by peer:

Sep 13 19:19:23 portal unbound: [50875:0] info: reply from <.> 1.0.0.1#853

That's not the default config, it's using DoT to cloudflare.

Does it resolve with the default config? Unbound resolving directly?

Steve

DaddyGo · Sep 13, 2020, 5:26 PM

@float said in Fetching package: connection reset by peer:

"Network interfaces" doesn't work, but when I select "LAN" and "localhost" it works.

Hmmm

float · Sep 13, 2020, 5:31 PM

@DaddyGo Weird, I just put "ALL" again and now it works. I'll reinstall and try again.

@stephenw10 I'll reinstall and try again.

DaddyGo · Sep 13, 2020, 5:31 PM

@float said in Fetching package: connection reset by peer:

I'll reinstall and try again.

No, no, Unbound has to restart, it's such an animal

float · Sep 13, 2020, 5:33 PM

I want to know if you actually have to click on "ALL" in order to make it work. Because after I changed it to "LAN" and "localhost" it worked.

DaddyGo · Sep 13, 2020, 5:36 PM

@float

Don't forget that "ALL" includes the WAN!
Unbound always restarts anyway, see DHCP leases or pfBlockerNG lists reload, etc

float · Sep 13, 2020, 5:36 PM

Then that would be the cause of my error. Weird because the default install of pfsense is "all"?

DaddyGo · Sep 13, 2020, 5:42 PM

@float

For me, the first is to configure the network interfaces and I don't care about the default config...

So I haven't even dealt with it yet

btw:
The pfSense DNS system is atom safe and works very well

stephenw10 · Sep 13, 2020, 8:23 PM

Mmm, listening for queries on 'all' should not be a problem. That's the default setting as you say.
Queries cannot actually come into WAN unless you have added rules to allow it.

Steve

float · Sep 16, 2020, 10:55 AM

It started working after I changed those settings and unbound restarted. This was the only option that changed.