Ubuntu can't send to Unbound

[Tom Carpay]

Hi Anthony,

Thanks for bringing this to our attention! I've verified, and Unbound 
was indeed not reachable by the system. I've updated the guide to 
overwrite /etc/resolv.conf, which should resolve the problem.

Best,
Tom

On 2022-05-27 01:40, ANTHONY MODSTER via Unbound-users wrote:

> Hello
> 
> Ubuntu can't send to Unbound
> 
> Ubuntu 20.04
> unbound Version 1.9.4
> Following steps for Single Machine
> https://unbound.docs.nlnetlabs.nl/en/latest/use-cases/home-resolver.html#setting-up-for-a-single-machine
> systemctl status unbound
> ● unbound.service - Unbound DNS server
> Loaded: loaded (/lib/systemd/system/unbound.service; enabled; vendor 
> preset: enabled)
> Active: active (running) since Thu 2022-05-26 09:25:41 PDT; 16s ago
> Docs: man:unbound(8)
> Process: 15561 ExecStartPre=/usr/lib/unbound/package-helper 
> chroot_setup (code=exited, status=0/SUCCESS)
> Process: 15564 ExecStartPre=/usr/lib/unbound/package-helper 
> root_trust_anchor_update (code=exited, status=0/SUCCESS)
> Main PID: 15569 (unbound)
> Tasks: 1 (limit: 9415)
> Memory: 6.1M
> CGroup: /system.slice/unbound.service
> └─15569 /usr/sbin/unbound -d
> 
> May 26 09:25:40 ubuntu systemd[1]: Starting Unbound DNS server...
> May 26 09:25:40 ubuntu package-helper[15567]: /var/lib/unbound/root.key 
> has content
> May 26 09:25:40 ubuntu package-helper[15567]: success: the anchor is ok
> May 26 09:25:41 ubuntu unbound[15569]: [15569:0] notice: init module 0: 
> subnet
> May 26 09:25:41 ubuntu unbound[15569]: [15569:0] notice: init module 1: 
> validator
> May 26 09:25:41 ubuntu unbound[15569]: [15569:0] notice: init module 2: 
> iterator
> May 26 09:25:41 ubuntu unbound[15569]: [15569:0] info: start of service 
> (unbound 1.9.4).
> May 26 09:25:41 ubuntu systemd[1]: Started Unbound DNS server.
> Before resolved.conf change
> dig example.com @127.0.0.1
> ; <<>> DiG 9.16.1-Ubuntu <<>> example.com @127.0.0.1
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 50659
> ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
> 
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 4096
> ;; QUESTION SECTION:
> ;example.com. IN A
> 
> ;; ANSWER SECTION:
> example.com. 86400 IN A 93.184.216.34
> 
> ;; Query time: 356 msec
> ;; SERVER: 127.0.0.1#53(127.0.0.1)
> ;; WHEN: Thu May 26 09:23:56 PDT 2022
> ;; MSG SIZE  rcvd: 56
> dig example.com
> ; <<>> DiG 9.16.1-Ubuntu <<>> example.com
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 12701
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
> 
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 65494
> ;; QUESTION SECTION:
> ;example.com. IN A
> 
> ;; ANSWER SECTION:
> example.com. 5 IN A 93.184.216.34
> 
> ;; Query time: 24 msec
> ;; SERVER: 127.0.0.53#53(127.0.0.53)
> ;; WHEN: Thu May 26 09:20:57 PDT 2022
> ;; MSG SIZE  rcvd: 56
> sudo gedit /etc/systemd/resolved.conf
> [Resolve]
> DNS=127.0.0.1
> #DNS=
> #FallbackDNS=
> #Domains=
> #LLMNR=no
> #MulticastDNS=no
> #DNSSEC=no
> #DNSOverTLS=no
> #Cache=no-negative
> DNSStubListener=no
> #DNSStubListener=yes
> #ReadEtcHosts=yes
> systemctl restart systemd-resolved
> systemctl status unbound
> ● unbound.service - Unbound DNS server
> Loaded: loaded (/lib/systemd/system/unbound.service; enabled; vendor 
> preset: enabled)
> Active: active (running) since Thu 2022-05-26 09:25:41 PDT; 5min ago
> Docs: man:unbound(8)
> Process: 15561 ExecStartPre=/usr/lib/unbound/package-helper 
> chroot_setup (code=exited, status=0/SUCCESS)
> Process: 15564 ExecStartPre=/usr/lib/unbound/package-helper 
> root_trust_anchor_update (code=exited, status=0/SUCCESS)
> Main PID: 15569 (unbound)
> Tasks: 1 (limit: 9415)
> Memory: 6.4M
> CGroup: /system.slice/unbound.service
> └─15569 /usr/sbin/unbound -d
> 
> May 26 09:25:40 ubuntu systemd[1]: Starting Unbound DNS server...
> May 26 09:25:40 ubuntu package-helper[15567]: /var/lib/unbound/root.key 
> has content
> May 26 09:25:40 ubuntu package-helper[15567]: success: the anchor is ok
> May 26 09:25:41 ubuntu unbound[15569]: [15569:0] notice: init module 0: 
> subnet
> May 26 09:25:41 ubuntu unbound[15569]: [15569:0] notice: init module 1: 
> validator
> May 26 09:25:41 ubuntu unbound[15569]: [15569:0] notice: init module 2: 
> iterator
> May 26 09:25:41 ubuntu unbound[15569]: [15569:0] info: start of service 
> (unbound 1.9.4).
> May 26 09:25:41 ubuntu systemd[1]: Started Unbound DNS server.
> May 26 09:26:55 ubuntu unbound[15569]: [15569:0] info: generate keytag 
> query _ta-4f66. NULL IN
> dig example.com
> ; <<>> DiG 9.16.1-Ubuntu <<>> example.com
> ;; global options: +cmd
> ;; connection timed out; no servers could be reached
> 
> Thanks
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nlnetlabs.nl/pipermail/unbound-users/attachments/20220530/0eff2551/attachment.htm>