Unable to update repository pfSense

[patient0]

@elvisimprsntr said in Unable to update repository pfSense:

From pfSense GUI or CLI, no.
Using Q9 for upstream DNS

How have you configured DNS, resolver or forward? And your clients use pfSense for DNS lookup?

[SteveITS]

@elvisimprsntr If forwarding, ensure DNSSEC is disabled.

Any restrictions on unbound or is it set to listen on All interfaces?

I would next restart DNS Resolver/unbound, or maybe pfSense.

[elvisimprsntr]

@patient0

1. DNS Resolver
2. Yes Clients use pfSense

I tried starting unbound. same issue.
I remotely rebooted my fiber modem (NVG599), and released and renewed WAN interface.

Seems to be working again.

Running 2.7.2 with all the latest patches.

This just started happening since I applied the latest swath of patches.

It is behaving like something on pfSense crashed or stops working.

@SteveITS

When I disable DNSSEC can't resolve static mappings.

https://forum.netgate.com/topic/196269/att-fiber-dns-issue/13

[patient0]

@elvisimprsntr said in Unable to update repository pfSense:

This just started happening since I applied the latest swath of patches.

I know it is obvious but I'd revert patches regarding unbound and see what happens.

[stephenw10]

Are clients, which can resolve, using pfSense for DNS or being passed quad9 to use directly?

What is the DNS behaviour setting in General Setup?

[elvisimprsntr]

@stephenw10 said in Unable to update repository pfSense:

Are clients, which can resolve, using pfSense for DNS or being passed quad9 to use directly?

Client are served pfSense LAN IP address

What is the DNS behaviour setting in General Setup?

[stephenw10]

Hmm, and Diag > DNS Lookup just fails for all configured severs? For any fqdn?

[elvisimprsntr]

@stephenw10

Correct.

After rebooting my fiber modem, and releasing and renewing the WAN interface it is working again.

To see if it has any affect, I also deleted the IPv6 Q9 DNS servers.

[stephenw10]

Hmm, weird. Hard to imagine what could have caused that for pfSense but not clients behind it.

[elvisimprsntr]

@stephenw10

When I restart both kea-dhcp4 and unbound the problem persists.

When I head to Status -> Interfaces -> Click on WAN Release then Renew, everything starts working again.

Not sure if this error is related when pfSense is trying to get an IP address from my fiber modem, which is in DHCP passthrough mode.

Feb  9 13:45:55 pfSense dhclient[9122]: unknown dhcp option value 0x7d

Feb  9 13:45:55 pfSense dhclient[9122]: DHCPREQUEST on igc0 to 192.168.1.254 port 67
Feb  9 13:45:55 pfSense dhclient[9122]: DHCPACK from 192.168.1.254
Feb  9 13:45:55 pfSense dhclient[9122]: unknown dhcp option value 0x7d
Feb  9 13:45:55 pfSense dhclient[11337]: RENEW
Feb  9 13:45:55 pfSense dhclient[12245]: Creating resolv.conf
Feb  9 13:45:55 pfSense dhclient[9122]: bound to [redacted] -- renewal in 300 seconds.

What other logs should I comb through for any evidence?