Unbound returns SERVFAIL

Help
1

Expected Behaviour:

Recursive DNS using Unbound should work but it doesn't.

  • Operating System (Family and Version) Raspberry Pi 5 (Bookworm)
  • Hardware Raspberry Pi 5
  • ASUS EBG19P Router
  • Vodafone THG3000 modem/Router with everything possible turned off so that it routes through to the ASUS without interference.
  • No Docker

Actual Behaviour:

I keep getting a SERVFAIL response. As far as I can tell one of the servers in the chain that Unbound is contacting is refusing to answer the request.
Any help would be much appriciated.

Debug Token:

https://tricorder.pi-hole.net/Y5DXgq4c/

2

SERVFAIL is pretty generic.
You have to determine if its Pi-hole or Unbound generating this return code.
You can do that by inspecting the Pi-hole and Unbound logs.
Some hints to go about below:

Also make sure date/time on the host is correct for DNSSEC validation to succeed:

timedatectl