Strange navigation problem

[Camilo625]

Hi, i'm having a weird problem on a fresh install of opnsense, after i configure a few things, i loose navigation to some sites, for example, i can load this forum fine, but google.com or youtube.com will timeout and same happens if i try to ping them, would love any help to troubleshoot!

Here is some extra info:
The box it's running opnsense 17.7.1_2, it has two wan ports but only one in use, and multi wan isn't configured(only the grouping), has google DNS set under system/settings/general and "Allow DNS server list to be overridden by DHCP/PPP on WAN" its off, its running behind a router but with dmz on, unbound dns is ON and forwarding mode as well

[franco]

Maybe a DNSSEC issue?

I have trouble with DNSSEC in my home network because of ISP meddling... Some sites refuse to resolve.


Cheers,
Franco

[Camilo625]

Maybe a DNSSEC issue?

I have trouble with DNSSEC in my home network because of ISP meddling... Some sites refuse to resolve.


Cheers,
Franco

That may be, i'm going to try with another ISP to see if i something changes. Thanks!

[franco]

You could also flip Unbound to forward mode or use Dnsmasq.

I have been unable to resolve the issue for this particular line, but another one works flawlessly with the default Unbound settings.


Cheers,
Franco

[Ciprian]

Maybe a DNSSEC issue?

I have trouble with DNSSEC in my home network because of ISP meddling... Some sites refuse to resolve.


Cheers,
Franco

That may be, i'm going to try with another ISP to see if i something changes. Thanks!

I advise you to try to disable only "Harden DNSSEC data" at first: I had same problems after fresh installs, especially since Unbound became the default resolver in OPNsense; disabling "Harden DNSSEC..." solved everything.

(Services -> Unbound DNS -> Advanced)

Case it's not enough, next step would be to disable DNSSEC completely, if you don't need DNSSEC.
I wouldn't throw-out Unbound DNS for DNSmasq DNS just for DNSSEC issues, Unbound is IMHO far more customizable and versatile.

Good luck!