<![CDATA[DNS resolver 2.5.1 syntax error]]>Hi,

I have upgraded from 2.4 to 2.5.1 and i noticed DNS resolver wouldn't start, it look like unbound reports a syntax error;

(under custom options, DNS Resolver)
local-zone: "use-application-dns.net" always_nxdomain

Error:

/status_services.php: The command '/usr/local/sbin/unbound -c /var/unbound/unbound.conf' returned exit code '1', the output was '/var/unbound/unbound.conf:106: error: syntax error read /var/unbound/unbound.conf failed: 1 errors in configuration file [1618601498] unbound[29998:0] fatal error: Could not read config file: /var/unbound/unbound.conf. Maybe try unbound -dd, it stays on the commandline to see more errors, or unbound-checkconf'

After i removed the line resolver started, I would like to ensure the NXDOMAIN for use-application-dns.net any suggestions please

-Chris

]]>https://forum.netgate.com/topic/163031/dns-resolver-2-5-1-syntax-errorRSS for NodeSun, 18 Oct 2026 00:32:28 GMTFri, 16 Apr 2021 19:38:24 GMT60<![CDATA[Reply to DNS resolver 2.5.1 syntax error on Fri, 16 Apr 2021 22:28:30 GMT]]>Choose which you want to do - you wouldn't put that in two places.. If your going to use the pfdnsbl feature, then you wouldn't put that in your option box.

If your not using the dnsbl options, then you could put it in your option box.. But you need the server: line above it, as you see in my screenpic.

]]>https://forum.netgate.com/post/978349https://forum.netgate.com/post/978349Fri, 16 Apr 2021 22:28:30 GMT<![CDATA[Reply to DNS resolver 2.5.1 syntax error on Fri, 16 Apr 2021 21:58:40 GMT]]>I had a minute so decided to play on my home router. If I "Enable DNSBL" (using the non-Python method) and enable "DoH/DoT Blocking," and run an update and force reload DNSBL, the upload log has DNSBL entries but the dashboard widget shows a hover/tooltip status of "*** SQLite database missing, Force Reload DNSBL to recover! ***" which doesn't sound all that successful. :) And "use-application-dns.net" resolves.

]]>https://forum.netgate.com/post/978344https://forum.netgate.com/post/978344Fri, 16 Apr 2021 21:58:40 GMT<![CDATA[Reply to DNS resolver 2.5.1 syntax error on Fri, 16 Apr 2021 21:41:32 GMT]]>Which I assume you would have to enable dnsbl to function..

Yeah I would just put it in the option box, unless you wan to use some of the dnsbl features?

]]>https://forum.netgate.com/post/978340https://forum.netgate.com/post/978340Fri, 16 Apr 2021 21:41:32 GMT<![CDATA[Reply to DNS resolver 2.5.1 syntax error on Fri, 16 Apr 2021 21:36:10 GMT]]>@johnpoz said in DNS resolver 2.5.1 syntax error:

I only use the basic functions of pfblocker

We do as well, so far, but it's on page Firewall/pfBlockerNG/DNSBL/DNSBL SafeSearch on version 3.x

]]>https://forum.netgate.com/post/978338https://forum.netgate.com/post/978338Fri, 16 Apr 2021 21:36:10 GMT<![CDATA[Reply to DNS resolver 2.5.1 syntax error on Fri, 16 Apr 2021 19:57:48 GMT]]>If you want to put that in the custom options.. you need the Server: in front of it..

Example

nxdomain.png

If your trying to do that with pfblocker, you wouldn't need it in the options box.

Where exactly would you set that in pfblocker, I only use the basic functions of pfblocker for some native alias stuff, and geoip aliases that I use in my rules manually.

]]>https://forum.netgate.com/post/978323https://forum.netgate.com/post/978323Fri, 16 Apr 2021 19:57:48 GMT<![CDATA[Reply to DNS resolver 2.5.1 syntax error on Fri, 16 Apr 2021 19:47:58 GMT]]>Looks like there's a setting in pfblocker-ng, under "DNSBL SafeSearch" to return NXdomain for the above plus more domains

]]>https://forum.netgate.com/post/978319https://forum.netgate.com/post/978319Fri, 16 Apr 2021 19:47:58 GMT