My pihole cannot resolve deutsche-glasfaser.de. The result is SERVFAIL. Please see the screenshot. This is the only domain that doesn't work with my installation. I have DNSSEC enabled and I am using unbound. Does anyone have an idea why this only doesn't work for this one domain? [Bildschirmfoto …

[image] firewire: deutsche-glasfaser.de Your screen capture shows that the query was refused by your upstream DNS server, which in this case is your local unbound instance. That's where the problem lies. Are you able to query unbound directly and receive a reply? dig deutsche-glasfaser.de …

Thank you for your quick reaction! A direct query shows the following replay: [Bildschirmfoto vom 2022-03-31 17-48-51] I have also switch on the logging for unbound and added the files. log unbound verbosity 5.txt (166.1 KB) log unbound verbosity 3.txt (5.1 KB)

I'm not very handy with unbound logs, but if you compare your locally generated log to the log shown at a separate instance of unbound, you may find the difference that is causing your problem. https://unboundtest.com/m/A/deutsche-glasfaser.de/IORDSYB2

Unfortunately, my knowledge is not sufficient for this. Maybe another pihole user who uses unbound has the same or a similar problem and can help solve it here.

Komisch, taucht bereits zum zweiten Mal auf: [image] Unbound doesn´t resolve "deutsche-glasfaser.de"? Help You will need to look under the hood with unbound to see why this specific query has failed. In your unbound configuration file that you installed using…

Es sollte laufen. Wie alt ist denn die Liste der Root-Server ? Kann es damit zusammenhängen ? [grafik]

I have similar issues with .de domains throughout the past month but haven't found the time to properly troubleshoot this. I never visited deutsche-glasfaser.de but other domains such as aldi-sued.de failed reliably with SERVFAIL, too. FWIW, I did just try both deutsche-glasfaser.de as well as aldi…

I just tried out deutsche-glasfaser.de and aldi-sued.de. aldi-sued.de works and deutsche-glasfaser.de continues to deliver a SERVFAIL The unbound configuration corresponds to that described on unbound - Pi-hole documentation with one exception. I have root-hints enabled. The file is updated monthly…

Let's ask one of the DNS root servers (192.55.83.30) which DNS server is authoritative for deutsche-glasfaser.de. Run from your Pi-hole machine, what's the output of: dig +noall +authority @192.55.83.30 ns deutsche-glasfaser.de

The answer ist as follows: [Bildschirmfoto vom 2022-04-05 09-49-53]

SERVFAIL with deutsche-glasfaser.de

Help

yubiuser April 1, 2022, 4:32pm 6

Komisch, taucht bereits zum zweiten Mal auf: