# Unbound doesn't work

**URL:** <https://discourse.pi-hole.net/t/unbound-doesnt-work/61292>\
**Category:** Community Help\
**Tags:** unbound\
**Created:** [February 18, 2023, 12:41pm UTC](https://discourse.pi-hole.net/t/unbound-doesnt-work/61292 "2023-02-18T12:41:37Z")\
**Posts on this page:** 1\
**Showing post:** 22

<div class="post-metadata">

**Author:** ![deHakkelaar](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/dehakkelaar/32/674_2.png) [@deHakkelaar](https://discourse.pi-hole.net/u/deHakkelaar)\
**Post date:** [March 1, 2023, 3:05pm UTC](https://discourse.pi-hole.net/t/unbound-doesnt-work/61292/22 "2023-03-01T15:05:18Z")

</div>

I think I maybe found a hint in below:

> [@hadifarnoud](#):
>
> ```auto
> sudo unbound-control lookup .
> The following name servers are used for lookup of .
> [..]
> Delegation with 13 names, of which 0 can be examined to query further addresses.
> It provides 26 IP addresses.
> 2001:500:12::d0d	not in infra cache.
> 192.112.36.4 NoAuthButRecursive rto 148 msec, ttl 724, ping 16 var 33 rtt 148, tA 0, tAAAA 0, tother 2, EDNS 0 probed.
> 2001:503:c27::2:30	not in infra cache.
> 192.58.128.30 NoAuthButRecursive rto 504 msec, ttl 727, ping 4 var 62 rtt 252, tA 0, tAAAA 0, tother 1, EDNS 0 probed.
> 2001:500:a8::e not in infra cache.
> 192.203.230.10 NoAuthButRecursive rto 196 msec, ttl 722, ping 16 var 45 rtt 196, tA 0, tAAAA 0, tother 1, EDNS 0 probed.
> 2001:500:9f::42 not in infra cache.
> 199.7.83.42 NoAuthButRecursive rto 137 msec, ttl 723, ping 5 var 33 rtt 137, tA 0, tAAAA 0, tother 2, EDNS 0 probed.
> 2001:500:2d::d not in infra cache.
> 199.7.91.13 NoAuthButRecursive rto 594 msec, ttl 726, ping 1 var 74 rtt 297, tA 0, tAAAA 0, tother 1, EDNS 0 probed.
> 2001:503:ba3e::2:30	not in infra cache.
> 198.41.0.4 NoAuthButRecursive rto 136 msec, ttl 722, ping 0 var 34 rtt 136, tA 0, tAAAA 0, tother 0, EDNS 0 probed.
> 2001:500:200::b not in infra cache.
> 199.9.14.201 NoAuthButRecursive rto 274 msec, ttl 726, ping 1 var 34 rtt 137, tA 0, tAAAA 0, tother 1, EDNS 0 probed.
> 2001:7fe::53 not in infra cache.
> 192.36.148.17 NoAuthButRecursive rto 181 msec, ttl 726, ping 17 var 41 rtt 181, tA 0, tAAAA 0, tother 2, EDNS 0 probed.
> 2001:dc3::35 not in infra cache.
> 202.12.27.33 NoAuthButRecursive rto 145 msec, ttl 728, ping 17 var 32 rtt 145, tA 0, tAAAA 0, tother 1, EDNS 0 probed.
> 2001:500:1::53 not in infra cache.
> 198.97.190.53 NoAuthButRecursive rto 636 msec, ttl 722, ping 11 var 37 rtt 159, tA 0, tAAAA 0, tother 3, EDNS 0 probed.
> 2001:500:2::c not in infra cache.
> 192.33.4.12 NoAuthButRecursive rto 968 msec, ttl 722, ping 76 var 223 rtt 968, tA 0, tAAAA 0, tother 0, EDNS 0 probed.
> 2001:7fd::1 not in infra cache.
> 193.0.14.129 NoAuthButRecursive rto 121 msec, ttl 725, ping 13 var 27 rtt 121, tA 0, tAAAA 0, tother 1, EDNS 0 probed.
> 2001:500:2f::f not in infra cache.
> 192.5.5.241 NoAuthButRecursive rto 151 msec, ttl 724, ping 3 var
> 
> ```

Above looks akward and should resemble below or similar to my knowledge for **unbound** v1.9:

```auto
pi@ph5a:~ $ sudo unbound-control lookup .
The following name servers are used for lookup of .
[..]
Delegation with 13 names, of which 0 can be examined to query further addresses.
It provides 26 IP addresses.
2001:503:ba3e::2:30 not in infra cache.
198.41.0.4 expired, rto 187184 msec, tA 0 tAAAA 0 tother 0.
2001:500:200::b not in infra cache.
199.9.14.201 expired, rto 187184 msec, tA 0 tAAAA 0 tother 0.
2001:500:2::c not in infra cache.
192.33.4.12 expired, rto 187184 msec, tA 0 tAAAA 0 tother 0.
2001:500:2d::d not in infra cache.
199.7.91.13 expired, rto 187184 msec, tA 0 tAAAA 0 tother 0.
2001:500:a8::e not in infra cache.
192.203.230.10 expired, rto 187184 msec, tA 0 tAAAA 0 tother 0.
2001:500:2f::f not in infra cache.
192.5.5.241 expired, rto 187184 msec, tA 0 tAAAA 0 tother 0.
2001:500:12::d0d not in infra cache.
192.112.36.4 expired, rto 187184 msec, tA 0 tAAAA 0 tother 0.
2001:500:1::53 not in infra cache.
198.97.190.53 expired, rto 187184 msec, tA 0 tAAAA 0 tother 0.
2001:7fe::53 not in infra cache.
192.36.148.17 expired, rto 187184 msec, tA 0 tAAAA 0 tother 0.
2001:503:c27::2:30 not in infra cache.
192.58.128.30 expired, rto 187184 msec, tA 0 tAAAA 0 tother 0.
2001:7fd::1 not in infra cache.
193.0.14.129 expired, rto 187184 msec, tA 0 tAAAA 0 tother 0.
2001:500:9f::42 not in infra cache.
199.7.83.42 expired, rto 187184 msec, tA 0 tAAAA 0 tother 0.
2001:dc3::35 not in infra cache.
202.12.27.33 expired, rto 187184 msec, tA 0 tAAAA 0 tother 0.

```

And the **NoAuthButRecursive** bit looked familiar to me:

> [@Pi-hole unbound servfail](https://discourse.pi-hole.net/t/pi-hole-unbound-servfail/46964/8):
>
> Did the above steps and these are my results. The following name servers are used for lookup of github.com. ;rrset 549 13 1 5 0 com. 549 IN NS i.gtld-servers.net. com. 549 IN NS c.gtld-servers.net. com. 549 IN NS d.gtld-servers.net. com. 549 IN NS f.gtld-servers.net. com. 549 IN NS l.gtld-servers.net. com. 549 IN NS k.gtld-servers.net. com. 549 IN NS m.gtld-servers.net. com. …

Checkout solution for that one.  
There might be some DNS filtering/redirecting going on upstream that bugs the system.

---

_[View the full topic](https://discourse.pi-hole.net/t/unbound-doesnt-work/61292)._