after upgrde to version eFa-4.0.4 error dns recursion

Bugs in eFa 4
Post Reply
EnricoGTT
Posts: 33
Joined: 09 Jun 2014 07:24

after upgrde to version eFa-4.0.4 error dns recursion

Post by EnricoGTT »

Hello,
After the upgrade to last version dns recursion as enabled automaticly, when tray to disable with eFa-Config show a timeout error about network service.
I see this error about unbound service:
[root@gttvmlin02efa conf.d]# systemctl status unbound.service
● unbound.service - Unbound recursive Domain Name Server
Loaded: loaded (/usr/lib/systemd/system/unbound.service; enabled; vendor preset: disabled)
Drop-In: /etc/systemd/system/unbound.service.d
└─override.conf
Active: failed (Result: timeout) since Thu 2021-02-04 12:27:49 CET; 16min ago
Process: 4313 ExecStartPre=/usr/sbin/unbound-anchor -a /var/lib/unbound/root.key -c /etc/unbound/icannbundle.pem -f /etc/resol>
Process: 4311 ExecStartPre=/usr/sbin/unbound-checkconf (code=exited, status=0/SUCCESS)

Feb 04 12:26:19 gttvmlin02efa.i.atm.to.it systemd[1]: Starting Unbound recursive Domain Name Server...
Feb 04 12:26:19 gttvmlin02efa.i.atm.to.it unbound-checkconf[4311]: unbound-checkconf: no errors in /etc/unbound/unbound.conf
Feb 04 12:27:49 gttvmlin02efa.i.atm.to.it systemd[1]: unbound.service: start-pre operation timed out. Terminating.
Feb 04 12:27:49 gttvmlin02efa.i.atm.to.it systemd[1]: unbound.service: Failed with result 'timeout'.
Feb 04 12:27:49 gttvmlin02efa.i.atm.to.it systemd[1]: Failed to start Unbound recursive Domain Name Server.

Thanks
Regards
User avatar
shawniverson
Posts: 3644
Joined: 13 Jan 2014 23:30
Location: Indianapolis, Indiana USA
Contact:

Re: after upgrde to version eFa-4.0.4 error dns recursion

Post by shawniverson »

Are the forwarder(s) you specified responding to unbound?
EnricoGTT
Posts: 33
Joined: 09 Jun 2014 07:24

Re: after upgrde to version eFa-4.0.4 error dns recursion

Post by EnricoGTT »

yes I tested the resolution with nslookup.
EnricoGTT
Posts: 33
Joined: 09 Jun 2014 07:24

Re: after upgrde to version eFa-4.0.4 error dns recursion

Post by EnricoGTT »

I have with test eFa antispam reproduced the issue.
The problem seems to be the firewall between efa server and dns.
But the query run correctly and i can't see packet bloked in the firewall.

Thanks

regards

Enrico
User avatar
pdwalker
Posts: 1553
Joined: 18 Mar 2015 09:16

Re: after upgrde to version eFa-4.0.4 error dns recursion

Post by pdwalker »

What's the result of the following commands:

Code: Select all

# netstat -plutn |grep :53
# dig -t mx google.com @127.0.0.1
# dig -t mx google.com @1.1.1.1
Post Reply