unable to resolve mask.icloud.com

[michmoor]

As the title states i cannot resolve mask.icloud.com therefore features such as apple private relay do not work.

What i have done.

1. Check pfSense resolution
   

2. Checked that using the DNS forwarders configured, Quad9 , i can resolve
   

3. Disabled DNS Forwarder and still the domain comes up as NXDOMAIN

4. Restarted unbound service.

DNS overall is functioning fine on the LAN. So its specific domains such as the one above that just cannot be resolved.

[michmoor]

Old forum post led me in the right direction.
I have forgotten that in pfBlocker there is an option in SafeSearch to block DoH/DoT.
Unchecked apples relay names and reloaded. Everything works.