Unbound doesn't work

deHakkelaar · March 1, 2023, 3:05pm

I think I maybe found a hint in below:

hadifarnoud:

sudo unbound-control lookup .
The following name servers are used for lookup of .
[..]
Delegation with 13 names, of which 0 can be examined to query further addresses.
It provides 26 IP addresses.
2001:500:12::d0d	not in infra cache.
192.112.36.4    	NoAuthButRecursive rto 148 msec, ttl 724, ping 16 var 33 rtt 148, tA 0, tAAAA 0, tother 2, EDNS 0 probed.
2001:503:c27::2:30	not in infra cache.
192.58.128.30   	NoAuthButRecursive rto 504 msec, ttl 727, ping 4 var 62 rtt 252, tA 0, tAAAA 0, tother 1, EDNS 0 probed.
2001:500:a8::e  	not in infra cache.
192.203.230.10  	NoAuthButRecursive rto 196 msec, ttl 722, ping 16 var 45 rtt 196, tA 0, tAAAA 0, tother 1, EDNS 0 probed.
2001:500:9f::42 	not in infra cache.
199.7.83.42     	NoAuthButRecursive rto 137 msec, ttl 723, ping 5 var 33 rtt 137, tA 0, tAAAA 0, tother 2, EDNS 0 probed.
2001:500:2d::d  	not in infra cache.
199.7.91.13     	NoAuthButRecursive rto 594 msec, ttl 726, ping 1 var 74 rtt 297, tA 0, tAAAA 0, tother 1, EDNS 0 probed.
2001:503:ba3e::2:30	not in infra cache.
198.41.0.4      	NoAuthButRecursive rto 136 msec, ttl 722, ping 0 var 34 rtt 136, tA 0, tAAAA 0, tother 0, EDNS 0 probed.
2001:500:200::b 	not in infra cache.
199.9.14.201    	NoAuthButRecursive rto 274 msec, ttl 726, ping 1 var 34 rtt 137, tA 0, tAAAA 0, tother 1, EDNS 0 probed.
2001:7fe::53    	not in infra cache.
192.36.148.17   	NoAuthButRecursive rto 181 msec, ttl 726, ping 17 var 41 rtt 181, tA 0, tAAAA 0, tother 2, EDNS 0 probed.
2001:dc3::35    	not in infra cache.
202.12.27.33    	NoAuthButRecursive rto 145 msec, ttl 728, ping 17 var 32 rtt 145, tA 0, tAAAA 0, tother 1, EDNS 0 probed.
2001:500:1::53  	not in infra cache.
198.97.190.53   	NoAuthButRecursive rto 636 msec, ttl 722, ping 11 var 37 rtt 159, tA 0, tAAAA 0, tother 3, EDNS 0 probed.
2001:500:2::c   	not in infra cache.
192.33.4.12     	NoAuthButRecursive rto 968 msec, ttl 722, ping 76 var 223 rtt 968, tA 0, tAAAA 0, tother 0, EDNS 0 probed.
2001:7fd::1     	not in infra cache.
193.0.14.129    	NoAuthButRecursive rto 121 msec, ttl 725, ping 13 var 27 rtt 121, tA 0, tAAAA 0, tother 1, EDNS 0 probed.
2001:500:2f::f  	not in infra cache.
192.5.5.241     	NoAuthButRecursive rto 151 msec, ttl 724, ping 3 var

Above looks akward and should resemble below or similar to my knowledge for unbound v1.9:

pi@ph5a:~ $ sudo unbound-control lookup .
The following name servers are used for lookup of .
[..]
Delegation with 13 names, of which 0 can be examined to query further addresses.
It provides 26 IP addresses.
2001:503:ba3e::2:30     not in infra cache.
198.41.0.4              expired, rto 187184 msec, tA 0 tAAAA 0 tother 0.
2001:500:200::b         not in infra cache.
199.9.14.201            expired, rto 187184 msec, tA 0 tAAAA 0 tother 0.
2001:500:2::c           not in infra cache.
192.33.4.12             expired, rto 187184 msec, tA 0 tAAAA 0 tother 0.
2001:500:2d::d          not in infra cache.
199.7.91.13             expired, rto 187184 msec, tA 0 tAAAA 0 tother 0.
2001:500:a8::e          not in infra cache.
192.203.230.10          expired, rto 187184 msec, tA 0 tAAAA 0 tother 0.
2001:500:2f::f          not in infra cache.
192.5.5.241             expired, rto 187184 msec, tA 0 tAAAA 0 tother 0.
2001:500:12::d0d        not in infra cache.
192.112.36.4            expired, rto 187184 msec, tA 0 tAAAA 0 tother 0.
2001:500:1::53          not in infra cache.
198.97.190.53           expired, rto 187184 msec, tA 0 tAAAA 0 tother 0.
2001:7fe::53            not in infra cache.
192.36.148.17           expired, rto 187184 msec, tA 0 tAAAA 0 tother 0.
2001:503:c27::2:30      not in infra cache.
192.58.128.30           expired, rto 187184 msec, tA 0 tAAAA 0 tother 0.
2001:7fd::1             not in infra cache.
193.0.14.129            expired, rto 187184 msec, tA 0 tAAAA 0 tother 0.
2001:500:9f::42         not in infra cache.
199.7.83.42             expired, rto 187184 msec, tA 0 tAAAA 0 tother 0.
2001:dc3::35            not in infra cache.
202.12.27.33            expired, rto 187184 msec, tA 0 tAAAA 0 tother 0.

And the NoAuthButRecursive bit looked familiar to me:

Checkout solution for that one.
There might be some DNS filtering/redirecting going on upstream that bugs the system.