Hi all, I just finished to looking for on related topic the same issue but I’m still in stuck with this DNS Issue. I have IPFire 2.25 (armv5tel) - Core Update 143 but also on previous Core Update 142 it’s doesn’t work. I configured my red0 with dhcp and I shoud retrieve DNS settings from my exter…

@pmueller @whitetiger and teejay in my case enable TLS is solving the issue. I will check also tomorrow if nothing will change and I will let you know. Thanks a lot fo the moment

Hi Peter, thanks for your input, here the /var/log/message related to unbound logs: Apr 27 11:22:40 HOST unbound: [17896:0] info: generate keytag query _ta-4a5c-4f66. NULL IN Apr 27 11:22:40 HOST unbound: [17896:0] info: failed to prime trust anchor – DNSKEY rrset is not secure . DNSKEY IN Apr 2…

I assume your router is not in bridge mode and is natting, right? I strongly suspect your router as culprit when even 8.8.8.8 google DNS doesn’t work with DNSSEC. Here’s a simliar case: [image] r/pihole - Pi-Hole + Unbound => Unbound anchor not ok // always SERVFAIL 6 votes and 15 comme…

Hi, this indeed looks like somebody is tampering with DNS queries - in the past, some members of the (in German) popular FritzBox product family simply dropped UDP queries to the root zone. :-/ Using DNS over TLS should solve this problem. Further information is available at: [image] W…

I also have the DNS panel in the “Broken” state. All DNS, including Google and Cloudflare, are in Error with “Reverse lookup failed” indicated In this condition the whole network is stopped and I am forced to activate all the PCs on the router. If we connect directly to the router, with the cable…

@whitetiger : Does enabling DNS over TLS solve this problem?

Keep in mind that Ipfire has been active for months; for some time now I have detected occasional blocks on certain websites, but usually these blocks last a few seconds.It is annoying because in some cases unsaved work is lost. However, I had never made it to the full block for a whole day. I tri…

@whitetiger : Please be more precise than just writing: However, I had never made it to the full block for a whole day. I assume your IPFire machine fails to resolve any given FQDN and returns SERVFAIL instead. The question is: Why? Could you provide contents of lines in /var/log/messages begin…

This is the log in the Log/SystemLog with filter “DNS Unbound” Just after IpFire restared |18:01:48|unbound: [1893:0]|info: service stopped (unbound 1.10.0).| |---|---|---| |18:01:48|unbound: [1893:0]|info: server stats for thread 0: 666 queries, 1 answers from cache, 665 recursi ons, 0 prefetch, …

Hi, this should not happen indeed: error: SERVFAIL <. DNSKEY IN>: failed to get a delegation (eg. prime failure) Could you post a screenshot of your current DNS settings and firewall rules, please? (Perhaps traffic to port 853/TCP is not allowed?) Thanks, and best regards, Peter Müller

Below are the screenshots. This installation of iPfire has never seen many changes. There is Clamav, IDS, Guardian. In recent days, a VPN and a DDNS with DuckDNS has been activated, but it has never been tested because in the meantime we are no longer able to go to the Internet if not by connecti…

IPFire Community

DNS Status: Broken

Network DNS

show post in topic

Home
Categories
Guidelines
Terms of Service
Privacy Policy

Powered by Discourse, best viewed with JavaScript enabled