Unbound and pfBlockerNG DNSBL returning DNSBL VIP instead of firewall IP

  • It was recommended that I move my question to the DNS forum. I initially asked it here:  https://forum.pfsense.org/index.php?topic=102470.msg587466#msg587466

    Issue is: my pfSense box (hostname "firewall.domain" with VLAN IP is my DNS server and when I query it for it's own IP, it returns the pfBlockerNG DNSBL VIP ( first and then the proper interface IP (

    I have pfBlockerNG DNSBL enabled and working well otherwise. Unbound is NOT in forwarding mode. I have disabled and enabled DHCP registration in Unbound to no avail. I have a host override for "firewall.domain" pointing to the VLAN IP and even tried disabling "DNS Rebinding Checks" and using Unbound's advanced config "server:private-domain: "domain"".

    Am I missing something in this setup? This isn't show-stopping, just a curiosity that I'd like to nail down…

    Dig results from my local machine:

    ; <<>> DiG 9.8.3-P1 <<>> firewall.domain
    ;; global options: +cmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 35064
    ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0
    ;firewall.domain.		IN	A
    firewall.domain.	3600	IN	A
    firewall.domain.	3600	IN	A
    ;; Query time: 0 msec
    ;; SERVER:

Log in to reply