DNS Resolver Error
-
Hello forum
Netgate 7100U
22.05-RELEASE (amd64)We just purchased a new firewall and the DNS Resolver shows errors. Also, clients can't reach domain names when the pfSense is set as DNS-server. We configured external DNS-servers on the clients for now and the problem (for them) is gone. I believe the error messages below and the DNS issues on the clients are somehow connected.
Oct 1 03:43:50 unbound 77679 [77679:1] error: recvfrom 24 failed: Protocol not available
Oct 1 03:43:50 unbound 77679 [77679:1] error: recvfrom 23 failed: Protocol not available
Oct 1 03:43:51 unbound 77679 [77679:1] error: recvfrom 24 failed: Protocol not available
Oct 1 03:43:52 unbound 77679 [77679:1] error: recvfrom 23 failed: Protocol not available
Oct 1 03:43:53 unbound 77679 [77679:1] error: recvfrom 24 failed: Protocol not available
Oct 1 03:43:55 unbound 77679 [77679:1] error: recvfrom 23 failed: Protocol not available
Oct 1 03:43:58 unbound 77679 [77679:1] error: recvfrom 24 failed: Protocol not available
Oct 1 03:44:01 unbound 77679 [77679:1] error: recvfrom 23 failed: Protocol not available
Oct 1 03:44:05 unbound 77679 [77679:2] error: recvfrom 24 failed: Protocol not available
Oct 1 04:04:55 unbound 77679 [77679:2] error: recvfrom 24 failed: Protocol not available
Oct 1 04:04:55 unbound 77679 [77679:0] error: recvfrom 23 failed: Protocol not available
Oct 1 04:04:55 unbound 77679 [77679:2] error: recvfrom 25 failed: Protocol not available
Oct 1 04:04:55 unbound 77679 [77679:0] error: recvfrom 24 failed: Protocol not available
Oct 1 04:04:55 unbound 77679 [77679:2] error: recvfrom 23 failed: Protocol not available
Oct 1 04:04:56 unbound 77679 [77679:0] error: recvfrom 24 failed: Protocol not available
Oct 1 04:04:56 unbound 77679 [77679:2] error: recvfrom 25 failed: Protocol not available
Oct 1 04:04:57 unbound 77679 [77679:2] error: recvfrom 25 failed: Protocol not availableWe have several pfSense firewalls running and none of them shows this behavior. Could you please point me in the right direction here? :) Thank you very much!
Cheers,
Kris -
@kkris It works out of the box…. Post your DNS Resolver settings?
Any firewall rules that might affect DNS/port 53/TCP or UDP?
If it’s new and you haven’t changed much you could always make a backup and try Diagnostics/Factory Defaults. -
Does that site have IPv6 where the others do not?
-
Hello
Sorry for the very late reply and thanks so much for your input.
@stephenw10 I deactivated IPv6 on the WAN interface and the errors are gone now. Thanks again!
Kind regards and have a nice weekend :)
Kris -
@kkris That was so simple - I have spend all day trying to figure it out - then did what you suggested and bang ... fixed. Cheers