Unbound unbound_manager (Manager/Installer utility for unbound - Recursive DNS Server)

[SuperDuke]

If implemented, I assume Skynet and Diversion become extraneous?....the new firewall that is.

 

[Martineau]

unbound went AWOL.

View attachment 22561

This is on an RT-AC86U with no IPv6.

What is the unbound error?

 

[Martineau]

If implemented, I assume Skynet and Diversion become extraneous?....the new firewall that is.

Well it depends, you could argue that the new feature competes with both Ad Block and Diversion for domain name blocking, so only one is required.

 

[L&LD]

@Martineau it seems to install, I even was able to grab the latest hotfix, but the only errors it states are:

Starting unbound... failed.

***ERROR Unbound went AWOL after 1 seconds......

***ERROR Unsuccessful installation of unbound detected.

 

[juched]

@Martineau it seems to install, I even was able to grab the latest hotfix, but the only errors it states are:

Starting unbound... failed.

***ERROR Unbound went AWOL after 1 seconds......

***ERROR Unsuccessful installation of unbound detected.

What do you see in /opt/var/lib/unbound/unbound.log?

 

[SuperDuke]

Well it depends, you could argue that the new feature competes with both Ad Block and Diversion for domain name blocking, so only one is required.

Thanks @Martineau ......is the new feature as rich as Diversion? Seems like a list update every 15 minutes is pretty enhanced....

The way I read the new feature was that it also included Skynet-esque functionality but these eyes are naive!

 

[Martineau]

@Martineau it seems to install, I even was able to grab the latest hotfix, but the only errors it states are:

Starting unbound... failed.

***ERROR Unbound went AWOL after 1 seconds......

***ERROR Unsuccessful installation of unbound detected.

Well as you proved earlier, deleting 'unbound.conf' should allow you to reinstall unbound using 'unbound_manager'
However try

unbound  -dd

 

[L&LD]

What do you see in /opt/var/lib/unbound/unbound.log?

No such file exists in that directory.

 

[L&LD]

Well as you proved earlier, deleting 'unbound.conf' should allow you to reinstall unbound using 'unbound_manager'
However try

unbound  -dd

The menu seems installed and amtm shows it at v3.00 which seems correct.

I did delete unbound.conf and it still doesn't install correctly.

I do see now a symbol lookup error: unbound: undefined symbol: log_ident.set default

Does that help?

Edit:

More undefined symbols.

rpz_action_to_string for:

'key-cache-size: '
'msg-cache-size: '
'rrset-cache-size: '

 

[Martineau]

The menu seems installed and amtm shows it at v3.00 which seems correct.

I did delete unbound.conf and it still doesn't install correctly.

I do see now a symbol lookup error: unbound: undefined symbol: log_ident.set default

Does that help?

Yes you haven't fixed the Entware related upgrade issue to remove the old library.

 

[L&LD]

@Martineau, removing the old library allows unbound_manager v3.00 to install and it is running on this RT-AC86U.

However, '?' doesn't show the 'Router Graphical GUI statistics TAB' option installed. Yet, option '6' says to Uninstall the GUI addon.

Pressing '6' though gives the following error.

And of course, there is no 'unbound_stats.sh' file in the '/jffs/addons/unbound/' directory.

 

[Martineau]

@Martineau, removing the old library allows unbound_manager v3.00 to install and it is running on this RT-AC86U.

However, '?' doesn't show the 'Router Graphical GUI statistics TAB' option installed. Yet, option '6' says to Uninstall the GUI addon.

Pressing '6' though gives the following error.

View attachment 22562

And of course, there is no 'unbound_stats.sh' file in the '/jffs/addons/unbound/' directory.

Can you physically view the GUI 'Unbound' TAB?

If you can, then it appears that the '/jffs/addons/unbound/' directory somehow got wiped -hence without the 'unbound_stats.sh' script, Option '6' can't physically remove the 'Unbound' TAB from the GUI.

 

[L&LD]

@Martineau, yes that GUI tab is visible. But it is showing very outdated 'stats' even if refreshed.

Can I get the 'unbound_stats.sh' file to manually put it in '/jffs/addons/unbound/'?

Curious why the installer doesn't put it there itself?

 

[Xentrk]

During the update, I got an error message below that the 'SSL handshake failed'. The solution is not to reuse the unbound.conf and press enter to download the new unbound.conf.

Do you want to KEEP your current unbound configuration? ('20200412-071748_unbound.conf')

        Reply 'y' to KEEP or press [Enter] to use new downloaded 'unbound.conf'
y

Reloading 'unbound.conf' status=error: SSL handshake failed


error: SSL handshake failed

        ***ERROR unbound-control - failed'?

 

[joe scian]

Hi Martineau

Juched Post 1255 is as per below - however the unbound.conf is different - ie the Zonefile: - which one is correct?

rpz:
   name: rpz.urlhaus.abuse.ch
   url: "http://urlhaus.abuse.ch/downloads/rpz/"
   zonefile: "/opt/var/lib/unbound/db.rpz.urlhaus.abuse.ch"
   rpz-log: yes
   rpz-log-name: "rpz.urlhaus.abuse.ch"
   rpz-action-override: nxdomain

#@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
# v1.08 Example rpz ( see https://medium.com/nlnetlabs/response-policy-zones-in-unbound-5d453de75f26)
#rpz:#RPZ                                                             # v1.08 RPZ Firewall
#name: rpz.urlhaus.abuse.ch
#url: "http://urlhaus.abuse.ch/downloads/rpz/"
#zonefile: "/opt/var/lib/unbound/urlhaus.rpz"
#rpz-log: yes
#rpz-log-name: "rpz.urlhaus.abuse.ch"
#rpz-action-override: nxdomain
#@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

 

[juched]

Hi Martineau

Juched Post 1255 is as per below - however the unbound.conf is different - ie the Zonefile: - which one is correct?

rpz:
   name: rpz.urlhaus.abuse.ch
   url: "http://urlhaus.abuse.ch/downloads/rpz/"
   zonefile: "/opt/var/lib/unbound/db.rpz.urlhaus.abuse.ch"
   rpz-log: yes
   rpz-log-name: "rpz.urlhaus.abuse.ch"
   rpz-action-override: nxdomain

#@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
# v1.08 Example rpz ( see https://medium.com/nlnetlabs/response-policy-zones-in-unbound-5d453de75f26)
#rpz:#RPZ                                                             # v1.08 RPZ Firewall
#name: rpz.urlhaus.abuse.ch
#url: "http://urlhaus.abuse.ch/downloads/rpz/"
#zonefile: "/opt/var/lib/unbound/urlhaus.rpz"
#rpz-log: yes
#rpz-log-name: "rpz.urlhaus.abuse.ch"
#rpz-action-override: nxdomain
#@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

The zone file is just a file name. You can all it what you want. It is the name which needs to match the RPZ content and it looks correct.

 

[lordtech]

Hi, after updating the Entware packages I updated unbound and then I started to see problems with the app. The problem is about the libunbound.so.8 library:

This problem does not allow me to uninstall the unbound from the menu even though I have the option there:

I delete the unbound.conf file, and also I removed the libunbound library, but no good so far.....

 

[lordtech]

Hi, after updating the Entware packages I updated unbound and then I started to see problems with the app. The problem is about the libunbound.so.8 library:

View attachment 22567

This problem does not allow me to uninstall the unbound from the menu even though I have the option there:

View attachment 22568

I delete the unbound.conf file, and also I removed the libunbound library, but no good so far.....

I managed to fix it. I reboot the router and then I was able to remove unbound. After that, the install process went OK and now it is working!

 

[juched]

I managed to fix it. I reboot the router and then I was able to remove unbound. After that, the install process went OK and now it is working!

Yes, this last entware update was a doozy. Glad you got it working.

 

[Amwjujo]

I managed to fix it. I reboot the router and then I was able to remove unbound. After that, the install process went OK and now it is working!

End up in the same situation as L&LD and then I saw lordtech post.
I did it a bit different but it finally worked .
1. Rebooted the router and run from the main ssh window (without going to amtm menu - I am writing this as they might be noobs like myself and won't have to struggle on running this from amtm menu, as it doesn't work )
opkg remove --force-depends libunbound
2. Unbound menu still there giving the "config" error and refuse to start or remove.
3. Updated unbound install and after i was able to uninstall it => Reboot.
4. Install Unbound .... everything works
Hope it helps ... at least worked for me