@mike123 said in Unable to resolve acb.netgate.com:
Login to the shell and type
dig acb.netgate.com
If you get no reponse
i.e. ;; communications error to 127.0.0.1#53: timed out
Iif "Login to the shell and type" is the console or SSH access of pfSense, and you get a "127.0.0.1#53: timed out" after "dig acb.netgate.com" then that means that the dig command couldn't connect to 127.0.0.1, port 53.
That means that unbound isn't running, or listening on 127.0.0.1 port 53 (localhost).
That is not normal at all.
First : : Check if it is running :
[24.03-RELEASE][root@pfSense.bhf.tld]/root: ps ax | grep 'unbound'
41201 - S 0:07.76 /usr/local/sbin/lighttpd_pfb -f /var/unbound/pfb_dnsbl_lighty.conf
86447 - Ss 25:07.40 /usr/local/sbin/unbound -c /var/unbound/unbound.conf
21124 0 S+ 0:00.00 grep unbound
(the second line == ok )
and check on what interface it is listening :
[24.03-RELEASE][root@pfSense.bhf.tld]/root: sockstat | grep 'unbound'
unbound unbound 86447 3 udp6 *:53 *:*
unbound unbound 86447 4 tcp6 *:53 *:*
unbound unbound 86447 5 udp4 *:53 *:*
unbound unbound 86447 6 tcp4 *:53 *:*
unbound unbound 86447 9 tcp4 127.0.0.1:953 *:*
unbound unbound 86447 10 dgram -> /var/run/log
unbound unbound 86447 12 stream -> [86447 14]
unbound unbound 86447 14 stream -> [86447 12]
unbound unbound 86447 15 stream -> [86447 16]
unbound unbound 86447 16 stream -> [86447 15]
The first 4 lines means : on port '53' :
For all protocols : TCP and UDP and TCP and UDP
This means all interfaces, which include '127.0.0.1'.
Btw : line 5 is unbound listing on localhost, the control port 953 TCP.
This option :
DNS Server Override -> Allow DNS server list to be overridden by DHCP/PPP on WAN or remote OpenVPN server
exist for very ancient reasons (before 2000 ?), when you had to use the ISP DNS servers, as resolving was 'expensive' and an internet connection was metered, and very slow (POTS modem uplink).
Many ISPs still propose a DNS or two, but I guess no one is using them anymore.
Why getting the info from 'some one' if you can get it from the source ?