Messages

If it still doesn't work keep lowering your mss value until it does

Interfaces>wan

Try clamping your mss to 1492

I had similar issues with Microsoft and it's the DNSmasq RA MTU that needs to be manually set. If you use radvd instead, the issue goes away. But setting the dnsmasq RA MTU to a workable value also fixes it. As does clamping the WAN MSS value

In Reporting, Unbound shows a blocklist size from two days ago (it's updated daily). The logs show that the DNSBLs were updated but then Unbound auto restored the database after the last two updates. Maybe corruption or size issues? I don't know

Yes I see the same thing. According to the Unbound logs the blocklist are updating but then a few hours later I see this in the log -

<Database auto restore from /var/cache/unbound.duckdb for cleanup reasons in 0.44 seconds>

https://opnsense.org/roadmap/

Also, the tester defaults back to Local Database after each test. Just something to watch out for:)

Uncheck Local Database in settings>administration>authentication. No need to have both TOTP and Local DB enabled. Then test again

Firewall>Diagnostics>States>Actions>Reset state table.
That should clear them if they're already disabled

Good stuff

Disable said extensions and see if the queries stop. It's almost certain that one of them is the cause. Be careful :)

Services > Router Advertisements:

    Interface: LAN
    Mode: *Unmanaged*

I would roll back to 25.7.11_9, delete your wan mtu and leave it blank, reboot. Then update to 26.1 and re-enter your wan mtu 1508. Maybe there's some shenanigans during the update

I'm on BT PPPOE (Openreach) and just set the wan mtu to 1508 without any issues on websites. Are you on Zen Openreach or Zen City Fibre?