26.1.1: Unbound: Option "query forwarding"->"Unexpected error, check log for."

Started by rolsch, February 09, 2026, 11:51:52 AM

Previous topic - Next topic
After updating to 26.1.1 today,
I switched from ISC DHCP to DNSMASQ (where I mainly use static IP‑MAC mappings).
After that, I migrated the firewall rules to Rules (new).
So far, so good.

Now I've noticed a strange behavior:
As soon as I enable the option "Use system nameservers" under Services → Unbound → Query Forwarding,
a red warning popup appears saying "Unexpected error, check log for details" along with the message "There are no system nameservers configured. Please do so in System: Settings: General."

However, I do have four DNS servers configured there, and two of them have a WAN interface assigned.

If I disable this option, Unbound uses the ISP DNS servers and
I can switch back and forth between the nav-points:

Services → Unbound DNS → Query Forwarding 
and

Services → Unbound DNS → DNS over TLS

without any error.

If I enable the option again,
the error message appears, but Unbound still uses the DNS server list.
It also seems that this option becomes active immediately after checking the box,
even without explicitly saving — restarting Unbound is enough.

I believe that in version 25.x.x I had this option enabled without any error.


I have deleted, saved the dns entrys in the System: Settings: General.
Restarted the system and enter again the dns-server in System: Settings: General.

But the DANGER message pop up in the two sections:

Services → Unbound DNS → Query Forwarding
Services → Unbound DNS → DNS over TLS

So what the heck is wrong...?????

Can you paste the PHP error from System: Firmware: Reporter here?


Thanks,
Franco

sure:

[11-Feb-2026 21:42:16 Europe/Brussels] TypeError: Cannot assign stdClass to property OPNsense\Mvc\Dispatcher::$returnedValue of type array|string|null in /usr/local/opnsense/mvc/app/library/OPNsense/Mvc/Dispatcher.php:166
Stack trace:
#0 /usr/local/opnsense/mvc/app/library/OPNsense/Mvc/Router.php(156): OPNsense\Mvc\Dispatcher->dispatch(Object(OPNsense\Mvc\Request), Object(OPNsense\Mvc\Response), Object(OPNsense\Mvc\Session))
#1 /usr/local/opnsense/mvc/app/library/OPNsense/Mvc/Router.php(139): OPNsense\Mvc\Router->performRequest(Object(OPNsense\Mvc\Dispatcher))
#2 /usr/local/opnsense/www/api.php(36): OPNsense\Mvc\Router->routeRequest('/api/unbound/se...', Array)
#3 {main}
[11-Feb-2026 21:42:33 Europe/Brussels] TypeError: Cannot assign stdClass to property OPNsense\Mvc\Dispatcher::$returnedValue of type array|string|null in /usr/local/opnsense/mvc/app/library/OPNsense/Mvc/Dispatcher.php:166
Stack trace:
#0 /usr/local/opnsense/mvc/app/library/OPNsense/Mvc/Router.php(156): OPNsense\Mvc\Dispatcher->dispatch(Object(OPNsense\Mvc\Request), Object(OPNsense\Mvc\Response), Object(OPNsense\Mvc\Session))
#1 /usr/local/opnsense/mvc/app/library/OPNsense/Mvc/Router.php(139): OPNsense\Mvc\Router->performRequest(Object(OPNsense\Mvc\Dispatcher))
#2 /usr/local/opnsense/www/api.php(36): OPNsense\Mvc\Router->routeRequest('/api/unbound/se...', Array)
#3 {main}


Are you using any browser extensions? And is the health audit clean?

Quote from: rolsch on February 10, 2026, 08:23:08 PMI have deleted, saved the dns entrys in the System: Settings: General.
Restarted the system and enter again the dns-server in System: Settings: General.

But the DANGER message pop up in the two sections:

Services → Unbound DNS → Query Forwarding
Services → Unbound DNS → DNS over TLS

So what the heck is wrong...?????

I just applied 26.1.2 this morning. I also have Query Forwarding checked with a few servers listed on the system setup page. I made the change to System DNS over Unbound yesterday for reasons mentioned in a new post in the General Discussions section.

I did not reboot as everything seemed to work immediately.

No issues of any kind, then or now.

I do not use DNS over TLS and my other settings are almost out of the box simple. (2 subnets, KEA and all devices with DHCP reservations, Adguard Home).

Hopefully, this will help narrow things down in the detective work.

edit:

DNS over TLS uses a different format for DNS servers. Perhaps the two DNS settings conflict? Use one or the other??

Quote from: franco on Today at 04:46:17 PMAre you using any browser extensions? And is the health audit clean?
- no browser extensions active
- health audit is clean
- updated to 26.1.2, Popup comes up

I have send the crash report.

Hi franco.

I have found - ? - the problem.

System: Settings: General; in the DNS servers list was two entrys with the same DNS-IP.
Removed both entrys, saved and no popup comes up in the unbound sections
Services → Unbound DNS → Query Forwarding
Services → Unbound DNS → DNS over TLS

For testing, i put the two same entrys again in the list, saved and and no popup comes up in the unbound sections - ???

By the way, i don't need this entrys and removed both.

Issue-Category: Easteregg ;-)



.

I tried to reproduce this with what you said now but failed like my colleague before me this earlier today.

Can you give me the exact data that caused the issue? I do not doubt there is a problem somewhere so better to fix it.


Thanks,
Franco