Debug where Unbound is finding a certain record

Started by janjoh, July 19, 2022, 07:07:15 PM

Previous topic - Next topic
(   OPNsense 22.1.10-amd64
FreeBSD 13.0-STABLE
OpenSSL 1.1.1q 5 Jul 2022 )

So, this is a strange one. Unbound is returning a record that really should not exist on my network any more.

It is not present in Aliases, not in the Unbound overrides. And not present in any of my public DNS servers.

Are there any tools to figure out where this stray record is hiding?

you may ssh into the box and use :

unbound-control -c /var/unbound/unbound.conf list_local_data | grep search_for_name

July 28, 2022, 02:45:27 PM #2 Last Edit: July 28, 2022, 04:54:26 PM by janjoh
Yeah, i see the record there. BUT, i do not see the same IP in the web interface for overrides. So, how do figure out where it comes from, and how to get rid of it?

If i add the correect A-record in Unbound overrides, the system returns BOTH addresses, and both are visible in local data.

I cannot figure out where it it getting this data.