Hi all,
I'm facing a strange issue with unbound after enabling the blacklist feature. I've found an old topic at https://forum.opnsense.org/index.php?topic=20060.0 that describes it, but I'm not sure if it has been solved yet.
So, unbound is up and running with the parameters I've set, but the moment I activate the blacklist feature it gets stuck with "[unbound.start] returned Error (1)", according to the backend log.
In the unbound log, it says that the file is downloaded (https://block.energized.pro/ultimate/formats/domains.txt).
Besides that, I don't have any other options in blacklist-feature set.
OPNsense 21.1.3_3-amd64
FreeBSD 12.1-RELEASE-p14-HBSD
OpenSSL 1.1.1j 16 Feb 2021
unbound 1.13.1
I've tried several combinations within the unbound settings (also /w different hosts-files and types), unfortunately none of them worked.
Services: Unbound DNS: General
enable = true
interfaces = all
dnssec = true
register dhcp leases = true
register dhcp static mappings = true
create corresponding txt records = true
enable forwaring mode = false
local zone type = transparent
custom options:
server:
tls-cert-bundle: /etc/ssl/cert.pem
forward-zone:
name:"."
forward-tls-upstream: yes
forward-addr: 1.1.1.2@853
forward-addr: 1.0.0.2@853
Services: Unbound DNS: Advanced
hide identity = true
hide version = true
prefetch support = true
prefetch dns key support = true
harden dnssec data = true
Services: Unbound DNS: Miscellaneous
dns over tls servers = 1.1.1.2@853, 1.0.0.2@853
Would highly appreciate if you could give me some hints how to approach that!
Many thanks in advance!
I'm having the same issue since i updated to 21.1.3. I have to disable blacklist and reboot for unbound service to start.
It serms to be an issue with the energized list.
Removing it and using other blocklists solves the problem.
I only have the https://dbl.oisd.nl/ list active now and unbound works fine.
Yes, it seems so. Tried different energized lists (and formats), but none of them seems to work. Anyhow, the one you provided (https://dbl.oisd.nl/) works fine!
@Christophe999s thank you, that was my issue as well. Completely forgot i was using energized list.