unbound refuses all requests

[Johannes B. Kernel]

Hey Paul,

thanks, i already added the access control, you can see above in the config
the access_control.conf looks like this:

access-control: 127.0.0.0/8 allow
access-control: 192.168.100.250 allow
access-control: "192.168.100.0/24" allow
access-control: "192.168.110.0/24" allow
access-control: "192.168.120.0/24" allow


the error i get in my unbound.log =

Nov 10 16:40:16 supabunka unbound: [5142:0] debug: refused query from ip4
192.168.100.250 port 49357 (len 16)
Nov 10 16:40:16 supabunka unbound: [5142:0] debug: refuse[49:0]
43290120000100000000000105776562676F0264650000010001000029100000000000000C000A00080436776A669C89B7

Nov 10 16:41:13 supabunka unbound: [5142:0] debug: refused query from ip4
192.168.100.250 port 41791 (len 16)
Nov 10 16:41:13 supabunka unbound: [5142:0] debug: refuse[49:0]
836E0120000100000000000105776562676F0264650000010001000029100000000000000C000A0008C262FD526020506C

Nov 10 16:42:38 supabunka unbound: [5142:1] debug: refused query from ip4
192.168.100.250 port 55452 (len 16)
Nov 10 16:42:38 supabunka unbound: [5142:1] debug: refuse[49:0]
5D5C0120000100000000000105776562676F0264650000010001000029100000000000000C000A00083AC515AEEE4DFAA9

Nov 10 16:42:39 supabunka unbound: [5142:1] debug: refused query from ip4
192.168.100.250 port 35626 (len 16)
Nov 10 16:42:39 supabunka unbound: [5142:1] debug: refuse[49:0]
CFFA0120000100000000000105776562676F0264650000010001000029100000000000000C000A0008B6428F351D09CF7F

Nov 10 16:44:17 supabunka unbound: [5142:0] debug: refused query from ip4
192.168.110.250 port 55197 (len 16)
Nov 10 16:44:17 supabunka unbound: [5142:0] debug: refuse[49:0]
FBFE012000010000000000010568656973650264650000010001000029100000000000000C000A00088556489A20B80DCE

i have no clue.
marko

Am Mi., 10. Nov. 2021 um 16:44 Uhr schrieb Paul Wouters <paul at nohats.ca>:

> On Wed, 10 Nov 2021, Johannes B. Kernel via Unbound-users wrote:
>
> > hello list,
> > unbound refuses all requests on my machine.
> > google dns server works fine, tested already.
> >
> >
> > my unbound.conf looks like:
>
> You are missing access-control: so only localhost is allowed access.
>
> See man unbound.conf on syntax for access-control:
>
> Paul
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nlnetlabs.nl/pipermail/unbound-users/attachments/20211110/b1bee629/attachment.htm>