OPNsense Forum

Archive => 22.1 Legacy Series => Topic started by: jcdick1 on March 19, 2022, 08:36:04 pm

Title: Unbound DNSBL update errors
Post by: jcdick1 on March 19, 2022, 08:36:04 pm
I have Unbound DNSBL enabled, and a selection of the built-in blocklists set in Cron to update once a day.  However, I get this error for each of the blocklists when it tries to update:

Code: [Select]
2022-02-21T16:18:21-06:00 Error unbound blocklist download : unable to download file from https://adaway.org/hosts.txt (error : HTTPSConnectionPool(host='adaway.org', port=443): Max retries exceeded with url: /hosts.txt (Caused by NewConnectionError('<urllib3.connection.HTTPSConnection object at 0x8025ca850>: Failed to establish a new connection: [Errno 8] Name does not resolve')))

2022-02-21T16:17:20-06:00 Error unbound blocklist download : unable to download file from https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts (error : HTTPSConnectionPool(host='raw.githubusercontent.com', port=443): Max retries exceeded with url: /StevenBlack/hosts/master/hosts (Caused by NewConnectionError('<urllib3.connection.HTTPSConnection object at 0x8025ca460>: Failed to establish a new connection: [Errno 8] Name does not resolve')))

Is there some configuration I might have missed beyond the checkmark in the Unbound DNSBL config, and adding the Cron job?  I don't have any custom blocklist URLs or such.

Any insight is appreciated.
Title: Re: Unbound DNSBL update errors
Post by: jcdick1 on March 25, 2022, 12:36:17 am
Might anyone know where the files are for the built-in DNSBLs?  Perhaps I can get in there and check why it can't find them to refresh.  I don't know for sure, but the error seems like it is trying to resolve just a base path, and not a full URL.
Title: Re: Unbound DNSBL update errors
Post by: cookiemonster on March 25, 2022, 10:46:53 am
I'd check you have name resolution working on OPN. Curl,wgt or fetch or similar i.e.:
$ curl https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts
Title: Re: Unbound DNSBL update errors
Post by: jcdick1 on March 25, 2022, 06:22:29 pm
Doing that curl command dumps out the file, and I'm able to check for opnsense updates on the repo which requires it, so name resolution seems to be working
Title: Re: Unbound DNSBL update errors
Post by: jcdick1 on March 26, 2022, 03:46:11 am
If someone could let me know where the files go, I could manually download and place them on the router, and restart Unbound.