Genau anders rum: # muss weg, " bleibt.
Oh man danke ..
pi@Pihole:~ $ cat /var/log/unbound/unbound.log
[1635802541] unbound[17540:0] notice: init module 0: subnet
[1635802541] unbound[17540:0] notice: init module 1: validator
[1635802541] unbound[17540:0] notice: init module 2: iterator
[1635802541] unbound[17540:0] info: start of service (unbound 1.9.0).
[1635802557] unbound[17540:0] info: resolving configuration.apple.com.akadns.net. TYPE65 IN
[1635802557] unbound[17540:0] info: priming . IN NS
[1635802557] unbound[17540:0] info: resolving configuration.apple.com.akadns.net. A IN
[1635802557] unbound[17540:0] info: priming . IN NS
[1635802557] unbound[17540:0] info: response for . NS IN
[1635802557] unbound[17540:0] info: reply from <.> 198.41.0.4#53
[1635802557] unbound[17540:0] info: query response was ANSWER
[1635802557] unbound[17540:0] info: priming successful for . NS IN
[1635802557] unbound[17540:0] info: priming successful for . NS IN
[1635802557] unbound[17540:0] info: response for configuration.apple.com.akadns.net. TYPE65 IN
[1635802557] unbound[17540:0] info: reply from <.> 192.33.4.12#53
[1635802557] unbound[17540:0] info: query response was REFERRAL
[1635802557] unbound[17540:0] info: response for configuration.apple.com.akadns.net. A IN
[1635802557] unbound[17540:0] info: reply from <.> 192.5.5.241#53
[1635802557] unbound[17540:0] info: query response was REFERRAL
[1635802557] unbound[17540:0] info: response for configuration.apple.com.akadns.net. TYPE65 IN
[1635802557] unbound[17540:0] info: reply from <net.> 192.43.172.30#53
[1635802557] unbound[17540:0] info: query response was REFERRAL
[1635802557] unbound[17540:0] info: resolving a12-131.akagtm.org. A IN
[1635802557] unbound[17540:0] info: resolving a13-130.akagtm.org. A IN
[1635802557] unbound[17540:0] info: resolving a5-130.akagtm.org. A IN
[1635802557] unbound[17540:0] info: response for configuration.apple.com.akadns.net. A IN
[1635802557] unbound[17540:0] info: reply from <net.> 192.54.112.30#53
[1635802557] unbound[17540:0] info: query response was REFERRAL
[1635802557] unbound[17540:0] info: resolving a18-128.akagtm.org. A IN
[1635802557] unbound[17540:0] info: resolving a28-129.akagtm.org. A IN
[1635802557] unbound[17540:0] info: response for configuration.apple.com.akadns.net. TYPE65 IN
[1635802557] unbound[17540:0] info: reply from <akadns.net.> 193.108.88.128#53
[1635802557] unbound[17540:0] info: query response was nodata ANSWER
[1635802557] unbound[17540:0] info: response for configuration.apple.com.akadns.net. A IN
[1635802557] unbound[17540:0] info: reply from <akadns.net.> 184.85.248.128#53
[1635802557] unbound[17540:0] info: query response was nodata ANSWER
[1635802557] unbound[17540:0] info: response for configuration.apple.com.akadns.net. TYPE65 IN
[1635802557] unbound[17540:0] info: reply from <akadns.net.> 84.53.139.129#53
[1635802557] unbound[17540:0] info: query response was nodata ANSWER
[1635802557] unbound[17540:0] info: response for a18-128.akagtm.org. A IN
[1635802557] unbound[17540:0] info: reply from <.> 192.33.4.12#53
[1635802557] unbound[17540:0] info: query response was REFERRAL
[1635802557] unbound[17540:0] info: response for a13-130.akagtm.org. A IN
[1635802557] unbound[17540:0] info: reply from <.> 193.0.14.129#53
[1635802557] unbound[17540:0] info: query response was REFERRAL
[1635802557] unbound[17540:0] info: response for a5-130.akagtm.org. A IN
[1635802557] unbound[17540:0] info: reply from <.> 199.9.14.201#53
[1635802557] unbound[17540:0] info: query response was REFERRAL
[1635802557] unbound[17540:0] info: response for a12-131.akagtm.org. A IN
[1635802557] unbound[17540:0] info: reply from <.> 202.12.27.33#53
[1635802557] unbound[17540:0] info: query response was REFERRAL
[1635802557] unbound[17540:0] info: response for configuration.apple.com.akadns.net. TYPE65 IN
[1635802557] unbound[17540:0] info: reply from <akadns.net.> 84.53.139.129#53
[1635802557] unbound[17540:0] info: query response was CNAME
[1635802557] unbound[17540:0] info: resolving configuration.apple.com.akadns.net. TYPE65 IN
[1635802557] unbound[17540:0] info: response for a28-129.akagtm.org. A IN
[1635802557] unbound[17540:0] info: reply from <.> 198.41.0.4#53
[1635802557] unbound[17540:0] info: query response was REFERRAL
[1635802557] unbound[17540:0] info: response for a13-130.akagtm.org. A IN
[1635802557] unbound[17540:0] info: reply from <org.> 199.249.112.1#53
[1635802557] unbound[17540:0] info: query response was REFERRAL
[1635802557] unbound[17540:0] info: response for configuration.apple.com.akadns.net. A IN
[1635802557] unbound[17540:0] info: reply from <akadns.net.> 96.7.49.129#53
[1635802557] unbound[17540:0] info: query response was nodata ANSWER
[1635802557] unbound[17540:0] info: response for configuration.apple.com.akadns.net. A IN
[1635802557] unbound[17540:0] info: reply from <akadns.net.> 84.53.139.129#53
[1635802557] unbound[17540:0] info: query response was CNAME
[1635802557] unbound[17540:0] info: resolving configuration.apple.com.akadns.net. A IN
[1635802557] unbound[17540:0] info: response for configuration.apple.com.akadns.net. TYPE65 IN
[1635802557] unbound[17540:0] info: reply from <net.> 192.54.112.30#53
[1635802557] unbound[17540:0] info: query response was REFERRAL
[1635802557] unbound[17540:0] info: response for a13-130.akagtm.org. A IN
[1635802557] unbound[17540:0] info: reply from <akagtm.org.> 95.100.175.129#53
[1635802557] unbound[17540:0] info: query response was ANSWER
[1635802557] unbound[17540:0] info: response for configuration.apple.com.akadns.net. A IN
[1635802557] unbound[17540:0] info: reply from <net.> 192.31.80.30#53
[1635802557] unbound[17540:0] info: query response was REFERRAL
[1635802557] unbound[17540:0] info: response for configuration.apple.com.akadns.net. TYPE65 IN
[1635802557] unbound[17540:0] info: reply from <edgekey.net.> 95.100.168.65#53
[1635802557] unbound[17540:0] info: query response was CNAME
[1635802557] unbound[17540:0] info: resolving configuration.apple.com.akadns.net. TYPE65 IN
[1635802557] unbound[17540:0] info: response for configuration.apple.com.akadns.net. A IN
[1635802557] unbound[17540:0] info: reply from <edgekey.net.> 84.53.139.66#53
[1635802557] unbound[17540:0] info: query response was CNAME
[1635802557] unbound[17540:0] info: resolving configuration.apple.com.akadns.net. A IN
[1635802557] unbound[17540:0] info: response for configuration.apple.com.akadns.net. TYPE65 IN
[1635802557] unbound[17540:0] info: reply from <edgekey.net.> 95.100.168.65#53
[1635802557] unbound[17540:0] info: query response was nodata ANSWER
[1635802557] unbound[17540:0] info: response for configuration.apple.com.akadns.net. A IN
[1635802557] unbound[17540:0] info: reply from <edgekey.net.> 96.7.49.65#53
[1635802557] unbound[17540:0] info: query response was nodata ANSWER
[1635802557] unbound[17540:0] info: response for configuration.apple.com.akadns.net. A IN
[1635802557] unbound[17540:0] info: reply from <edgekey.net.> 193.108.91.66#53
[1635802557] unbound[17540:0] info: query response was CNAME
[1635802557] unbound[17540:0] info: resolving configuration.apple.com.akadns.net. A IN
[1635802557] unbound[17540:0] info: response for a5-130.akagtm.org. A IN
[1635802557] unbound[17540:0] info: reply from <org.> 199.19.53.1#53
[1635802557] unbound[17540:0] info: query response was REFERRAL
[1635802557] unbound[17540:0] info: response for a28-129.akagtm.org. A IN
[1635802557] unbound[17540:0] info: reply from <org.> 199.19.56.1#53
[1635802557] unbound[17540:0] info: query response was REFERRAL
[1635802557] unbound[17540:0] info: response for a12-131.akagtm.org. A IN
[1635802557] unbound[17540:0] info: reply from <org.> 199.19.56.1#53
[1635802557] unbound[17540:0] info: query response was REFERRAL
[1635802557] unbound[17540:0] info: response for a5-130.akagtm.org. A IN
[1635802557] unbound[17540:0] info: reply from <akagtm.org.> 72.246.46.129#53
[1635802557] unbound[17540:0] info: query response was ANSWER
[1635802557] unbound[17540:0] info: response for a18-128.akagtm.org. A IN
[1635802557] unbound[17540:0] info: reply from <org.> 199.19.54.1#53
[1635802557] unbound[17540:0] info: query response was REFERRAL
[1635802557] unbound[17540:0] info: response for a12-131.akagtm.org. A IN
[1635802557] unbound[17540:0] info: reply from <akagtm.org.> 23.211.132.131#53
[1635802557] unbound[17540:0] info: query response was ANSWER
[1635802557] unbound[17540:0] info: response for configuration.apple.com.akadns.net. A IN
[1635802557] unbound[17540:0] info: reply from <net.> 192.52.178.30#53
[1635802557] unbound[17540:0] info: query response was REFERRAL
[1635802557] unbound[17540:0] info: response for a28-129.akagtm.org. A IN
[1635802557] unbound[17540:0] info: reply from <akagtm.org.> 95.100.168.128#53
[1635802557] unbound[17540:0] info: query response was ANSWER
[1635802557] unbound[17540:0] info: response for configuration.apple.com.akadns.net. A IN
[1635802557] unbound[17540:0] info: reply from <akamaiedge.net.> 23.61.199.194#53
[1635802557] unbound[17540:0] info: query response was REFERRAL
[1635802557] unbound[17540:0] info: response for configuration.apple.com.akadns.net. A IN
[1635802557] unbound[17540:0] info: reply from <dsce9.akamaiedge.net.> 95.101.230.125#53
[1635802557] unbound[17540:0] info: query response was ANSWER
[1635802557] unbound[17540:0] info: prime trust anchor
[1635802557] unbound[17540:0] info: generate keytag query _ta-4f66. NULL IN
[1635802557] unbound[17540:0] info: resolving . DNSKEY IN
[1635802557] unbound[17540:0] info: resolving _ta-4f66. NULL IN
[1635802557] unbound[17540:0] info: response for . DNSKEY IN
[1635802557] unbound[17540:0] info: reply from <.> 192.58.128.30#53
[1635802557] unbound[17540:0] info: query response was ANSWER
[1635802557] unbound[17540:0] info: validate keys with anchor(DS): sec_status_secure
[1635802557] unbound[17540:0] info: Successfully primed trust anchor . DNSKEY IN
[1635802557] unbound[17540:0] info: validated DS net. DS IN
[1635802557] unbound[17540:0] info: resolving net. DNSKEY IN
[1635802557] unbound[17540:0] info: response for _ta-4f66. NULL IN
[1635802557] unbound[17540:0] info: reply from <.> 192.58.128.30#53
[1635802557] unbound[17540:0] info: query response was NXDOMAIN ANSWER
[1635802557] unbound[17540:0] info: response for configuration.apple.com.akadns.net. TYPE65 IN
[1635802557] unbound[17540:0] info: reply from <edgekey.net.> 184.26.160.65#53
[1635802557] unbound[17540:0] info: query response was CNAME
[1635802557] unbound[17540:0] info: resolving configuration.apple.com.akadns.net. TYPE65 IN
[1635802557] unbound[17540:0] info: response for configuration.apple.com.akadns.net. TYPE65 IN
[1635802557] unbound[17540:0] info: reply from <dsce9.akamaiedge.net.> 95.101.230.140#53
[1635802557] unbound[17540:0] info: query response was nodata ANSWER
[1635802557] unbound[17540:0] info: validated DS net. DS IN
[1635802557] unbound[17540:0] info: response for a18-128.akagtm.org. A IN
[1635802557] unbound[17540:0] info: reply from <akagtm.org.> 2.22.230.129#53
[1635802557] unbound[17540:0] info: query response was ANSWER
[1635802557] unbound[17540:0] info: response for net. DNSKEY IN
[1635802557] unbound[17540:0] info: reply from <net.> 192.12.94.30#53
[1635802557] unbound[17540:0] info: query response was ANSWER
[1635802557] unbound[17540:0] info: validated DNSKEY net. DNSKEY IN
[1635802557] unbound[17540:0] info: validated DNSKEY net. DNSKEY IN
[1635802557] unbound[17540:0] info: NSEC3s for the referral proved no DS.
[1635802557] unbound[17540:0] info: Verified that unsigned response is INSECURE
[1635802557] unbound[17540:0] info: NSEC3s for the referral proved no DS.
[1635802557] unbound[17540:0] info: Verified that unsigned response is INSECURE
[1635802557] unbound[17540:0] info: NSEC3s for the referral proved no DS.
[1635802557] unbound[17540:0] info: Verified that unsigned response is INSECURE
[1635802557] unbound[17540:0] info: NSEC3s for the referral proved no DS.
[1635802557] unbound[17540:0] info: Verified that unsigned response is INSECURE
[1635802569] unbound[17540:0] info: resolving e69896.dscapi6.akamaiedge.net. A IN
[1635802569] unbound[17540:0] info: response for e69896.dscapi6.akamaiedge.net. A IN
[1635802569] unbound[17540:0] info: reply from <akamaiedge.net.> 95.100.168.194#53
[1635802569] unbound[17540:0] info: query response was REFERRAL
[1635802569] unbound[17540:0] info: response for e69896.dscapi6.akamaiedge.net. A IN
[1635802569] unbound[17540:0] info: reply from <dscapi6.akamaiedge.net.> 95.101.230.175#53
[1635802569] unbound[17540:0] info: query response was ANSWER
[1635802569] unbound[17540:0] info: NSEC3s for the referral proved no DS.
[1635802569] unbound[17540:0] info: Verified that unsigned response is INSECURE
[1635802569] unbound[17540:0] info: resolving gateway.fe.apple-dns.net. A IN
[1635802569] unbound[17540:0] info: response for gateway.fe.apple-dns.net. A IN
[1635802569] unbound[17540:0] info: reply from <net.> 192.26.92.30#53
[1635802569] unbound[17540:0] info: query response was REFERRAL
[1635802569] unbound[17540:0] info: resolving b.ns.apple.com. A IN
[1635802569] unbound[17540:0] info: resolving d.ns.apple.com. A IN
[1635802569] unbound[17540:0] info: resolving a.ns.apple.com. A IN
[1635802569] unbound[17540:0] info: response for a.ns.apple.com. A IN
[1635802569] unbound[17540:0] info: reply from <.> 199.7.91.13#53
[1635802569] unbound[17540:0] info: query response was REFERRAL
[1635802569] unbound[17540:0] info: response for b.ns.apple.com. A IN
[1635802569] unbound[17540:0] info: reply from <.> 199.9.14.201#53
[1635802569] unbound[17540:0] info: query response was REFERRAL
[1635802569] unbound[17540:0] info: response for d.ns.apple.com. A IN
[1635802569] unbound[17540:0] info: reply from <.> 199.7.83.42#53
[1635802569] unbound[17540:0] info: query response was REFERRAL
[1635802569] unbound[17540:0] info: response for a.ns.apple.com. A IN
[1635802569] unbound[17540:0] info: reply from <com.> 192.35.51.30#53
[1635802569] unbound[17540:0] info: query response was REFERRAL
[1635802569] unbound[17540:0] info: response for b.ns.apple.com. A IN
[1635802569] unbound[17540:0] info: reply from <com.> 192.55.83.30#53
[1635802569] unbound[17540:0] info: query response was REFERRAL
[1635802569] unbound[17540:0] info: response for d.ns.apple.com. A IN
[1635802569] unbound[17540:0] info: reply from <com.> 192.33.14.30#53
[1635802569] unbound[17540:0] info: query response was REFERRAL
[1635802569] unbound[17540:0] info: response for a.ns.apple.com. A IN
[1635802569] unbound[17540:0] info: reply from <apple.com.> 17.253.200.1#53
[1635802569] unbound[17540:0] info: query response was nodata ANSWER
[1635802569] unbound[17540:0] info: response for b.ns.apple.com. A IN
[1635802569] unbound[17540:0] info: reply from <apple.com.> 204.26.57.1#53
[1635802569] unbound[17540:0] info: query response was nodata ANSWER
[1635802569] unbound[17540:0] info: response for d.ns.apple.com. A IN
[1635802569] unbound[17540:0] info: reply from <apple.com.> 17.253.207.1#53
[1635802569] unbound[17540:0] info: query response was nodata ANSWER
[1635802569] unbound[17540:0] info: response for a.ns.apple.com. A IN
[1635802569] unbound[17540:0] info: reply from <apple.com.> 204.19.119.1#53
[1635802569] unbound[17540:0] info: query response was ANSWER
[1635802569] unbound[17540:0] info: response for b.ns.apple.com. A IN
[1635802569] unbound[17540:0] info: reply from <apple.com.> 204.26.57.1#53
[1635802569] unbound[17540:0] info: query response was ANSWER
[1635802569] unbound[17540:0] info: response for d.ns.apple.com. A IN
[1635802569] unbound[17540:0] info: reply from <apple.com.> 204.26.57.1#53
[1635802569] unbound[17540:0] info: query response was ANSWER
[1635802569] unbound[17540:0] info: response for gateway.fe.apple-dns.net. A IN
[1635802569] unbound[17540:0] info: reply from <apple-dns.net.> 17.253.200.1#53
[1635802569] unbound[17540:0] info: query response was REFERRAL
[1635802569] unbound[17540:0] info: resolving ns-1124.awsdns-12.org. A IN
[1635802569] unbound[17540:0] info: resolving ns-1572.awsdns-04.co.uk. A IN
[1635802569] unbound[17540:0] info: resolving ns-287.awsdns-35.com. A IN
[1635802569] unbound[17540:0] info: response for ns-1124.awsdns-12.org. A IN
[1635802569] unbound[17540:0] info: reply from <org.> 199.249.120.1#53
[1635802569] unbound[17540:0] info: query response was REFERRAL
[1635802570] unbound[17540:0] info: response for ns-1124.awsdns-12.org. A IN
[1635802570] unbound[17540:0] info: reply from <awsdns-12.org.> 205.251.196.15#53
[1635802570] unbound[17540:0] info: query response was ANSWER
[1635802570] unbound[17540:0] info: response for ns-1572.awsdns-04.co.uk. A IN
[1635802570] unbound[17540:0] info: reply from <.> 192.58.128.30#53
[1635802570] unbound[17540:0] info: query response was REFERRAL
[1635802570] unbound[17540:0] info: response for ns-287.awsdns-35.com. A IN
[1635802570] unbound[17540:0] info: reply from <com.> 192.33.14.30#53
[1635802570] unbound[17540:0] info: query response was REFERRAL
[1635802570] unbound[17540:0] info: response for gateway.fe.apple-dns.net. A IN
[1635802570] unbound[17540:0] info: reply from <fe.apple-dns.net.> 205.251.196.100#53
[1635802570] unbound[17540:0] info: query response was ANSWER
[1635802570] unbound[17540:0] info: NSEC3s for the referral proved no DS.
[1635802570] unbound[17540:0] info: Verified that unsigned response is INSECURE
[1635802570] unbound[17540:0] info: response for ns-287.awsdns-35.com. A IN
[1635802570] unbound[17540:0] info: reply from <awsdns-35.com.> 205.251.194.99#53
[1635802570] unbound[17540:0] info: query response was ANSWER
[1635802570] unbound[17540:0] info: response for ns-1572.awsdns-04.co.uk. A IN
[1635802570] unbound[17540:0] info: reply from <uk.> 156.154.103.3#53
[1635802570] unbound[17540:0] info: query response was nodata ANSWER
[1635802570] unbound[17540:0] info: response for ns-1572.awsdns-04.co.uk. A IN
[1635802570] unbound[17540:0] info: reply from <uk.> 213.248.220.1#53
[1635802570] unbound[17540:0] info: query response was REFERRAL
[1635802570] unbound[17540:0] info: response for ns-1572.awsdns-04.co.uk. A IN
[1635802570] unbound[17540:0] info: reply from <awsdns-04.co.uk.> 205.251.197.199#53
[1635802570] unbound[17540:0] info: query response was ANSWER
pi@Pihole:~ $
Unbound läuft jetzt erstmal. Und jetzt sende mal ein query für ssa.gov und such den passenden ubound log eintrag.
635803037] unbound[17751:0] info: iterator operate: query www.ssa.gov. A IN
[1635803037] unbound[17751:0] info: processQueryTargets: www.ssa.gov. A IN
[1635803037] unbound[17751:0] info: sending query: www.ssa.gov. A IN
[1635803037] unbound[17751:0] debug: sending to target: <ssa.gov.> 137.200.4.30#53
[1635803037] unbound[17751:0] debug: cache memory msg=37910 rrset=79553 infra=16690 val=38117 subnet=41372
[1635803037] unbound[17751:0] debug: iterator[module 2] operate: extstate:module_wait_reply event:module_event_noreply
[1635803037] unbound[17751:0] info: iterator operate: query www.ssa.gov. TYPE65 IN
[1635803037] unbound[17751:0] info: processQueryTargets: www.ssa.gov. TYPE65 IN
[1635803037] unbound[17751:0] info: sending query: www.ssa.gov. TYPE65 IN
[1635803037] unbound[17751:0] debug: sending to target: <ssa.gov.> 137.200.4.30#53
[1635803037] unbound[17751:0] debug: cache memory msg=37910 rrset=79553 infra=16690 val=38117 subnet=41372
[1635803037] unbound[17751:0] debug: iterator[module 2] operate: extstate:module_wait_reply event:module_event_noreply
[1635803037] unbound[17751:0] info: iterator operate: query www.ssa.gov. A IN
[1635803037] unbound[17751:0] info: processQueryTargets: www.ssa.gov. A IN
[1635803037] unbound[17751:0] info: sending query: www.ssa.gov. A IN
[1635803037] unbound[17751:0] debug: sending to target: <ssa.gov.> 137.200.4.30#53
[1635803037] unbound[17751:0] debug: cache memory msg=37910 rrset=79553 infra=16690 val=38117 subnet=41372
[1635803037] unbound[17751:0] debug: iterator[module 2] operate: extstate:module_wait_reply event:module_event_noreply
[1635803037] unbound[17751:0] info: iterator operate: query www.ssa.gov. A IN
[1635803037] unbound[17751:0] info: processQueryTargets: www.ssa.gov. A IN
[1635803037] unbound[17751:0] info: sending query: www.ssa.gov. A IN
[1635803037] unbound[17751:0] debug: sending to target: <ssa.gov.> 137.200.4.31#53
[1635803037] unbound[17751:0] debug: cache memory msg=37910 rrset=79553 infra=16690 val=38117 subnet=41372
[1635803037] unbound[17751:0] debug: iterator[module 2] operate: extstate:module_wait_reply event:module_event_noreply
[1635803037] unbound[17751:0] info: iterator operate: query www.ssa.gov. TYPE65 IN
[1635803037] unbound[17751:0] info: processQueryTargets: www.ssa.gov. TYPE65 IN
[1635803037] unbound[17751:0] info: sending query: www.ssa.gov. TYPE65 IN
[1635803037] unbound[17751:0] debug: sending to target: <ssa.gov.> 137.200.43.8#53
[1635803037] unbound[17751:0] debug: cache memory msg=37910 rrset=79553 infra=16690 val=38117 subnet=41372
[1635803037] unbound[17751:0] debug: iterator[module 2] operate: extstate:module_wait_reply event:module_event_noreply
[1635803037] unbound[17751:0] info: iterator operate: query www.ssa.gov. TYPE65 IN
[1635803037] unbound[17751:0] info: processQueryTargets: www.ssa.gov. TYPE65 IN
[1635803037] unbound[17751:0] info: sending query: www.ssa.gov. A IN
[1635803037] unbound[17751:0] debug: sending to target: <ssa.gov.> 137.200.43.8#53
[1635803037] unbound[17751:0] debug: cache memory msg=37910 rrset=79553 infra=16690 val=38117 subnet=41372
[1635803037] unbound[17751:0] debug: iterator[module 2] operate: extstate:module_wait_reply event:module_event_noreply
[1635803037] unbound[17751:0] info: iterator operate: query www.ssa.gov. A IN
[1635803037] unbound[17751:0] info: processQueryTargets: www.ssa.gov. A IN
[1635803037] unbound[17751:0] info: sending query: www.ssa.gov. A IN
[1635803037] unbound[17751:0] debug: sending to target: <ssa.gov.> 137.200.43.8#53
[1635803037] unbound[17751:0] debug: cache memory msg=37910 rrset=79553 infra=16690 val=38117 subnet=41372
[1635803037] unbound[17751:0] debug: iterator[module 2] operate: extstate:module_wait_reply event:module_event_noreply
[1635803037] unbound[17751:0] info: iterator operate: query www.ssa.gov. A IN
[1635803037] unbound[17751:0] info: processQueryTargets: www.ssa.gov. A IN
[1635803037] unbound[17751:0] info: sending query: www.ssa.gov. A IN
[1635803037] unbound[17751:0] debug: sending to target: <ssa.gov.> 137.200.4.30#53
[1635803037] unbound[17751:0] debug: cache memory msg=37910 rrset=79553 infra=16690 val=38117 subnet=41372
[1635803037] unbound[17751:0] debug: iterator[module 2] operate: extstate:module_wait_reply event:module_event_noreply
[1635803037] unbound[17751:0] info: iterator operate: query www.ssa.gov. A IN
[1635803037] unbound[17751:0] info: processQueryTargets: www.ssa.gov. A IN
[1635803037] unbound[17751:0] info: sending query: www.ssa.gov. A IN
[1635803037] unbound[17751:0] debug: sending to target: <ssa.gov.> 137.200.4.31#53
[1635803037] unbound[17751:0] debug: cache memory msg=37910 rrset=79553 infra=16690 val=38117 subnet=41372
pi@Pihole:~ $
Da fehlt die irgendwie die Antwort section. Frage mal den Server direkt ab
rockpi@rockpi-4b:~$ dig ssa.gov @137.200.4.31
; <<>> DiG 9.11.5-P4-5.1+deb10u5-Debian <<>> ssa.gov @137.200.4.31
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 47444
;; flags: qr aa rd; QUERY: 1, ANSWER: 2, AUTHORITY: 4, ADDITIONAL: 9
;; WARNING: recursion requested but not available
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
; COOKIE: f7c185b278fbe4fc55f17b61618061502496b42fc8573412 (good)
;; QUESTION SECTION:
;ssa.gov. IN A
;; ANSWER SECTION:
ssa.gov. 36000 IN A 137.200.39.19
ssa.gov. 36000 IN A 137.200.4.16
;; AUTHORITY SECTION:
ssa.gov. 36000 IN NS dns6.ssa.gov.
ssa.gov. 36000 IN NS dns1.ssa.gov.
ssa.gov. 36000 IN NS dns5.ssa.gov.
ssa.gov. 36000 IN NS dns2.ssa.gov.
;; ADDITIONAL SECTION:
dns1.ssa.gov. 60 IN A 137.200.43.8
dns2.ssa.gov. 36000 IN A 137.200.43.9
dns5.ssa.gov. 36000 IN A 137.200.4.30
dns6.ssa.gov. 36000 IN A 137.200.4.31
dns1.ssa.gov. 36000 IN AAAA 2001:1930:d07:1::8
dns2.ssa.gov. 36000 IN AAAA 2001:1930:d07:1::9
dns5.ssa.gov. 36000 IN AAAA 2001:1930:e03::c
dns6.ssa.gov. 36000 IN AAAA 2001:1930:e03::d
;; Query time: 117 msec
;; SERVER: 137.200.4.31#53(137.200.4.31)
;; WHEN: Mon Nov 01 22:51:12 CET 2021
;; MSG SIZE rcvd: 348
P.S. Führst du die Abfrage von einem Apple Geräte aus?
Ja ich frage sie über ein Apple Gerät ab.
1635803656] unbound[17935:0] info: reply from <awsdns-13.net.> 205.251.195.15#53
[1635803656] unbound[17935:0] info: query response was ANSWER
[1635803662] unbound[17935:0] info: resolving www.ssa.gov. A IN
[1635803662] unbound[17935:0] info: resolving www.ssa.gov. TYPE65 IN
[1635803663] unbound[17935:0] info: resolving www.ssa.gov. A IN
[1635803663] unbound[17935:0] info: resolving www.ssa.gov. TYPE65 IN
[1635803665] unbound[17935:0] info: resolving www.ssa.gov. A IN
[1635803665] unbound[17935:0] info: resolving www.ssa.gov. TYPE65 IN
pi@Pihole:~ $
pi@Pihole:~ $ dig ssa.gov @137.200.4.31
; <<>> DiG 9.11.5-P4-5.1+deb10u6-Raspbian <<>> ssa.gov @137.200.4.31
;; global options: +cmd
;; connection timed out; no servers could be reached
pi@Pihole:~ $ dig ssa.gov @137.200.4.31
; <<>> DiG 9.11.5-P4-5.1+deb10u6-Raspbian <<>> ssa.gov @137.200.4.31
;; global options: +cmd
;; connection timed out; no servers could be reached
pi@Pihole:~ $
Wen ich das jetzt richtig gemacht habe.
Dann würde er ja nicht rauskommen ?
pi@Pihole:~ $ dig bmw.de
; <<>> DiG 9.11.5-P4-5.1+deb10u6-Raspbian <<>> bmw.de
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 35104
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1472
;; QUESTION SECTION:
;bmw.de. IN A
;; ANSWER SECTION:
bmw.de. 300 IN A 160.46.226.165
;; Query time: 61 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Mo Nov 01 23:05:34 CET 2021
;; MSG SIZE rcvd: 51
pi@Pihole:~ $ dig bmw.de @160.46.226.165
; <<>> DiG 9.11.5-P4-5.1+deb10u6-Raspbian <<>> bmw.de @160.46.226.165
;; global options: +cmd
;; connection timed out; no servers could be reached
pi@Pihole:~ $ dig bmw.de @160.46.226.165
; <<>> DiG 9.11.5-P4-5.1+deb10u6-Raspbian <<>> bmw.de @160.46.226.165
;; global options: +cmd
;; connection timed out; no servers could be reached
pi@Pihole:~ $
Ja, du hast Netzwerk-Probleme.
Dein Pi kann nicht zuverlässig externe DNS Server erreichen. Hast du eine Firewall, denn den Zugriff evt. blockiert?
Nein ich habe keine Firewall im Betrieb nur eine normale FRITZ!Box 7590.
also nach dem nun die Test Seite auf der weboberfläsche unter settings funktioniert https://dnssec.vs.uni-due.de
funktioniert auch wieder ssa.gov
und die unbound test
dig sigfail.verteiltesysteme.net @127.0.0.1 -p 5335
dig sigfail.verteiltesysteme.net @127.0.0.1 -p 5335
pi@Pihole:~ $ dig sigfail.verteiltesysteme.net @127.0.0.1 -p 5335
; <<>> DiG 9.11.5-P4-5.1+deb10u6-Raspbian <<>> sigfail.verteiltesysteme.net @127.0.0.1 -p 5335
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 16687
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1472
;; QUESTION SECTION:
;sigfail.verteiltesysteme.net. IN A
;; Query time: 122 msec
;; SERVER: 127.0.0.1#5335(127.0.0.1)
;; WHEN: Di Nov 02 13:29:24 CET 2021
;; MSG SIZE rcvd: 57
pi@Pihole:~ $ dig sigok.verteiltesysteme.net @127.0.0.1 -p 5335
; <<>> DiG 9.11.5-P4-5.1+deb10u6-Raspbian <<>> sigok.verteiltesysteme.net @127.0.0.1 -p 5335
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 23654
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1472
;; QUESTION SECTION:
;sigok.verteiltesysteme.net. IN A
;; ANSWER SECTION:
sigok.verteiltesysteme.net. 60 IN A 134.91.78.139
;; Query time: 21 msec
;; SERVER: 127.0.0.1#5335(127.0.0.1)
;; WHEN: Di Nov 02 13:29:33 CET 2021
;; MSG SIZE rcvd: 71
pi@Pihole:~ $
ssa.gov
dig ssa.gov @137.200.4.31
; <<>> DiG 9.11.5-P4-5.1+deb10u6-Raspbian <<>> ssa.gov @137.200.4.31
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 61828
;; flags: qr aa rd; QUERY: 1, ANSWER: 2, AUTHORITY: 4, ADDITIONAL: 9
;; WARNING: recursion requested but not available
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
; COOKIE: 99f47e0f64854c09242d803f61812faecaf0a8d0759724a6 (good)
;; QUESTION SECTION:
;ssa.gov. IN A
;; ANSWER SECTION:
ssa.gov. 36000 IN A 137.200.4.16
ssa.gov. 36000 IN A 137.200.39.19
;; AUTHORITY SECTION:
ssa.gov. 36000 IN NS dns1.ssa.gov.
ssa.gov. 36000 IN NS dns2.ssa.gov.
ssa.gov. 36000 IN NS dns5.ssa.gov.
ssa.gov. 36000 IN NS dns6.ssa.gov.
;; ADDITIONAL SECTION:
dns1.ssa.gov. 60 IN A 137.200.43.8
dns2.ssa.gov. 36000 IN A 137.200.43.9
dns5.ssa.gov. 36000 IN A 137.200.4.30
dns6.ssa.gov. 36000 IN A 137.200.4.31
dns1.ssa.gov. 36000 IN AAAA 2001:1930:d07:1::8
dns2.ssa.gov. 36000 IN AAAA 2001:1930:d07:1::9
dns5.ssa.gov. 36000 IN AAAA 2001:1930:e03::c
dns6.ssa.gov. 36000 IN AAAA 2001:1930:e03::d
;; Query time: 113 msec
;; SERVER: 137.200.4.31#53(137.200.4.31)
;; WHEN: Di Nov 02 13:31:42 CET 2021
;; MSG SIZE rcvd: 348
pi@Pihole:~ $
das ist schon sehr kommich !!!
Ok, verbuchen wir das erstmal als externes Problem und freuen uns, dass es wieder funktioniert. Vielleicht funktionierte das Routing bei deinem ISP auch nicht ordentlich. Schade, dass du dafür einen freien Tag opfern musstest.
ja das mag sein aber ich denke da liegt Fehler im Pihole vor. ich habe jetzt wieder ein aufgesetzt ( alles neu aus dem Netzt melden ) andere Standort .. gleiches problem ... das ist schon merkwürdig 
Deine ursprüngliche Beobachtung war eindeutig korrekt und ebenso eindeutig auf den Ausfall von sigfail.verteiltesysteme.net und dnssec.vs.uni-due.de zurückzuführen - also auf eine externe Ursache.
Entsprechend habe ich den hierzu sachlich richtigen Beitrag als Lösung markiert.
Da jetzt anscheinend weitere, anders gelagerte Probleme auftreten:
Könntest Du dafür bitte ein neues Topic mit einer entsprechenden Beschreibung aufmachen?
This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.