unbound resolver requests requirements for packet filter

[Simon Deziel]

On 2020-02-03 4:21 p.m., Gerben Wierda wrote:
> The replies that are blocked come from quad9 (9.9.9.9) which is not supposed to be that slow, is it?

Your initial pflog dump showed 204.61.216.50. Anyway, for quad9, since
they are an open resolver, they depend on the responsiveness of the
upstream NSes that may be slow themselves and they don't have their
caches hot for this domain?

If you want to use forwarders, you could also try the other big players
like Cloudflare and Google.

Simon