OPNsense 24.4.1_3-amd64, possibly applicable to earlier versions, too.
I have noticed that sometimes host aliases don't work when used in firewall rules and the machines get their addresses via dhcp. The aliases expand to nothing as if the leases were not registered with unbound. Restarting unbound seems to resolve the issue. I haven't had the time to debug the issue yet and it's happening only infrequently. Has anyone seen this before and is there a solution?