DNS not resolving

[privateer]

Hello,
after something that i don't know  happened the dns server on my firewall it's not resolving anymore.
atthached the screenshot of my setup.

if i query a dns lookup from a client (DHCP gives the firewall ip ad first dns to the clients) i got a time out, what am i missing?

Andrea

[phoenix]

I'd suggest you remove the localhost IP from the first entry, if you actually have a DNS server running on the firewall LAN IP then change it to that.

[privateer]

I'd suggest you remove the localhost IP from the first entry, if you actually have a DNS server running on the firewall LAN IP then change it to that.

uh, i forgot to delete it, that was one of the many things i tried...

[privateer]

I'd suggest you remove the localhost IP from the first entry, if you actually have a DNS server running on the firewall LAN IP then change it to that.

nothing changed after this try...

[guest15389]

What's the client you are running to test?

Can you share the ipconfig or /etc/resolv.conf to see if it's puling the right DNS?

If you check your Unbound -> Access Lists, are you seeing the right networks in there?

Do you have a firewall rule to allow all LAN traffic?

[privateer]

i had to rebuild the firewall since i believe the configuration was completely f**ked.
now Unbound dns is working but if i check the option "Register DHCP leases in the DNS Resolver" the service stops. to start it again i have to unchek the flag.
in the and log there are this errors:

May 15 11:49:56   unbound: [97525:0] fatal error: Could not set up local zones
May 15 11:49:56   unbound: [97525:0] error: Bad local-data RR .tortuga.local IN A 192.168.0.100

but i don't really know what they mean...

[franco]

Looks like there is a device in your network that advertises an empty hostname.

[privateer]

as long i can remember maybe there's a client without hostname which actually has an ip given by the dhcp.
and the ip 192.168.0.100 is free...

[Ciprian]

It might be nothing, but did you see the space after RR in "...RR .tortuga.local..."? I guess the FQDN should be RR.tortuga.local (without the space)?!... Or is RR short for Round Robin?!... 

[privateer]

"RR" is not something i wrote anywhere, it comes from opnsense (intended as "from the service")