Unbound connection problems

[Xdrinkn]

Please follow the below template, it will help us to help you!

Expected Behaviour:

Pihole is working fine, installing unbound was smooth no errors. Expected having a recursion DNS

Actual Behaviour:

After starting unbound, I get dns probe error everywhere along with refused headers on dig commands but dig on hosts 127.0.0.1 return noerror. So internet when I set the pihole fnd as 127.0.0.1

Debug Token:

<<>> DiG 9.11.5-P4-5.1-Raspbian <<>> cnn.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 53449
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;cnn.com.                       IN      A

;; Query time: 1 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Sun Sep 29 08:11:51 BST 2019
;; MSG SIZE  rcvd: 36

pi@raspberrypi:~ $ dig cnn.com @127.0.0.1 -p5353

; <<>> DiG 9.11.5-P4-5.1-Raspbian <<>> cnn.com @127.0.0.1 -p5353
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63039
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1472
;; QUESTION SECTION:
;cnn.com.                       IN      A

;; ANSWER SECTION:
cnn.com.                60      IN      A       151.101.65.67
cnn.com.                60      IN      A       151.101.129.67
cnn.com.                60      IN      A       151.101.193.67
cnn.com.                60      IN      A       151.101.1.67

;; Query time: 38 msec
;; SERVER: 127.0.0.1#5353(127.0.0.1)
;; WHEN: Sun Sep 29 08:11:57 BST 2019
;; MSG SIZE  rcvd: 100

[jfb]

Please send us the token generated by

pihole -d

or do it through the Web interface:

How do I debug my Pi-hole installation?

Method 1: Generate a debug token via the Web interface Log in to your Pi-hole's Web interface Navigate to Tools > Generate debug log Click the Generate debug log button Send us the debug token [debug] Method 2: Use the command line to generate a debug token Login into your Pi-hole's command line Enter pihole -d Provide us with the debug token that is generated after the debug script completes Alternative: Securely sending us additional information Preferred Method If there is additi…

[Xdrinkn]

https://tricorder.pi-hole.net/8yegikf5bg

[jfb]

You have Pi-Hole configured to use your router for DNS, not unbound.

PIHOLE_DNS_1=192.168.1.1#53

[Xdrinkn]

Sorry that was just now but I had 127.0.0.1 before I'll up new log
Well it wouldn't let me upload it since I have no internet when I switch pihole dns to 127.0.0.1 so can't upload log

[jfb]

This will temporarily reset the nameserver on the Pi to bypass Pi-Hole DNS.

sudo nano /etc/resolv.conf

edit nameserver 127.0.0.1 to nameserver 9.9.9.9 or your preferred third party DNS service, save and exit

Run pihole -d and upload the debug log

[Xdrinkn]

https://tricorder.pi-hole.net/hpirxz4uhh
Thanks here's the new log

[Xdrinkn]

https://tricorder.pi-hole.net/ab2o162cjx

This is is latest one after nameserver 1.1.1.1

I don't get it discourse.pi-hole.net is the only website I can visit everything else throws bad dns prob error

[DL6ER]

@Xdrinkn

https://tricorder.pi-hole.net/hpirxz4uhh
Thanks here’s the new log

server=192.168.1.1

@Xdrinkn

https://tricorder.pi-hole.net/ab2o162cjx

This is is latest one after nameserver 1.1.1.1

You set

server=127.0.0.1

but forgot to set the port 5353. Without it, the Pi-hole would try to connect to itself resulting in an endless loop.

[jfb]

The correct DNS assignment for a local instance of unbound in the web GUI looks like this.

[Xdrinkn]

Ah that was the problem, thank you all working now