Yes, because when Unbound is off, you're using a WAN DNS server that isn't residing in a banned country. It's the authoritative DNS server that's banned, not the website.
Unbound unbound_manager (Manager/Installer utility for unbound - Recursive DNS Server)
- Thread starter Martineau
- Start date
Mutzli
Very Senior Member
Thank you, that makes total sense. Now I have figure out why hulu stopped working.
Stevens243
Regular Contributor
Before I got quite this far, I uninstalled Unbound, rebooted and still have no USAA access...I'm looking into other things.
(Solved). Purge your pixelserv-tls certs and re-issue them. Flush browser cache if needed and then re-install Unbound. I know that I used the "use pixelserv for the webui" function in AMTM on Sunday to see if it worked. But, purging the certificate and doing it over solved this issue for me.
More data: in Diversion select EP, then opt 3 and purge the TLS domain cert.
Last edited:
A few things:
1. Thanks, @Martineau, for this script. I've installed and uninstalled unbound a few times today, exploring, and I would never have waded in without the script.
2. The problem with USAA is, I think, unrelated to unbound or pixelserv. I've uninstalled unbound and purged the pixelserv domain certs (but NOT the ca.crt, oy what a headache that would be), rebooted everything and I still have the problem.
3. Using the old school
Diversion log follow, I see going to usaa.com produces a lot of blocked domains:
If I unblock the first one, the pages load fine. So, sorry for the detour, nothing to see here.
Except USAA and I will have a few words after googling tt.omtrdc.net:
Also, since I will be away from this mission-critical location for 2 months, I've left things as they were before (as to which, see #1) and will explore this further on a 56U and 87U.
1. Thanks, @Martineau, for this script. I've installed and uninstalled unbound a few times today, exploring, and I would never have waded in without the script.
2. The problem with USAA is, I think, unrelated to unbound or pixelserv. I've uninstalled unbound and purged the pixelserv domain certs (but NOT the ca.crt, oy what a headache that would be), rebooted everything and I still have the problem.
3. Using the old school
Diversion log follow, I see going to usaa.com produces a lot of blocked domains:
Code:
20:10:43 blocked by blockinglist usaa.tt.omtrdc.net
20:10:43 blocked by blockinglist s.go-mpulse.net
20:10:44 blocked by blockinglist tags.tiqcdn.com
20:10:44 blocked by blockinglist dpm.demdex.net
20:10:44 blocked by blockinglist www.everestjs.net
20:10:44 blocked by blockinglist www.google-analytics.com
20:10:44 blocked by blockinglist www.googletagmanager.com
20:10:44 blocked by blockinglist datacloud.tealiumiq.com
20:10:44 blocked by blockinglist d.agkn.com
20:10:44 blocked by blockinglist sp.analytics.yahoo.com
20:10:44 blocked by blockinglist browser.pipe.aria.microsoft.comExcept USAA and I will have a few words after googling tt.omtrdc.net:
Code:
Adobe Target is the Adobe Experience Cloud solution that provides everything you need to tailor and personalize your customers' experience so you can maximize revenue on your web and mobile sites, apps, social media, and other digital channels.Also, since I will be away from this mission-critical location for 2 months, I've left things as they were before (as to which, see #1) and will explore this further on a 56U and 87U.
Last edited:
Safemode
Regular Contributor
Everything is working perfectly. Thank you again for looking into this.
SomeWhereOverTheRainBow
Part of the Furniture
unbound is providing a cleaner name resolution.
Stevens243
Regular Contributor
Hmmph. It worked when I checked it after purging the TLS domain cert, but I saw your post, rechecked and not working again.A few things:
1. Thanks, @Martineau, for this script. I've installed and uninstalled unbound a few times today, exploring, and I would never have waded in without the script.
2. The problem with USAA is, I think, unrelated to unbound or pixelserv. I've uninstalled unbound and purged the pixelserv domain certs (but NOT the ca.crt, oy what a headache that would be), rebooted everything and I still have the problem.
3. Using the old school
If I unblock the first one, the pages load fine. So, sorry for the detour, nothing to see here.Code:20:10:43 blocked by blockinglist usaa.tt.omtrdc.net 20:10:43 blocked by blockinglist s.go-mpulse.net 20:10:44 blocked by blockinglist tags.tiqcdn.com 20:10:44 blocked by blockinglist dpm.demdex.net 20:10:44 blocked by blockinglist www.everestjs.net 20:10:44 blocked by blockinglist www.google-analytics.com 20:10:44 blocked by blockinglist www.googletagmanager.com 20:10:44 blocked by blockinglist datacloud.tealiumiq.com 20:10:44 blocked by blockinglist d.agkn.com 20:10:44 blocked by blockinglist sp.analytics.yahoo.com 20:10:44 blocked by blockinglist browser.pipe.aria.microsoft.com
Except USAA and I will have a few words about googling tt.omtrdc.net:Code:Adobe Target is the Adobe Experience Cloud solution that provides everything you need to tailor and personalize your customers' experience so you can maximize revenue on your web and mobile sites, apps, social media, and other digital channels.
Also, since I will be away from this mission-critical location for 2 months, I've left things as they were before (as to which, see #1) and will explore this further on a 56U and 87U.
So, I checked and the tt.omtrdc is being blocked and whitelisting it in diversion solved it. But now, I cannot uninstall Unbound either. Opt Z, then Y and it says Uninstall cancelled. No difference after a reboot either
SomeWhereOverTheRainBow
Part of the Furniture
it is a known issue, many attempts have been made to fix this issue. for now it shall be dubbed parking lot.
Martineau
Part of the Furniture
Not sure - I don't use the GUI.
Originally I wasn't sure if I should remove the scribe logs in case they were supposed to be retained or simply because unbound_manager hadn't actually configured scribe.
However, I can alter option 'z' which will execute the following
Code:
rm /opt/etc/syslog-ng.d/unbound /opt/var/log/unbound.logNot sure if this will resolve your scribe GUI issue?, but you can manually try the process and report back.
Last edited:
C
Chris_J
Guest
Those who have the 86U, have you tried the config tweaks with success? Everything is running great with the defaults, but I am far too tempted to break things.
Martineau
Part of the Furniture
I assume that the Entware NTP Server was manually installed to explicitly override the native firmware NTP Server.
Subsequently the script presumes that the presence of the Entware NTP Server should take priority, but seemingly doesn't detect it running.
I suppose it could be that my assumption logic is currently flawed, and you may have previously installed the Entware NTP Server, didn't like it, so reverted to the native firmware NTP Server option, but forgot to uninstall the Entware NTP version.
However, could you please run the following two commands and post the results.
Code:
which ntpd
/opt/etc/init.d/S77ntpd check
Last edited:
Martineau
Part of the Furniture
If you are referring to these performance tweaks post #50 then I recall that at least one user has posted that they were a little too unstable so were backed out.
I personally don't use the 'unbound_config' performance tweaks, but welcome any proven settings to be added as defaults for a first install..
For the script option
Code:
o4. Customise CPU/Memory usage (Advanced Users)Consequently, as shown at the top of post #1 this is now implemented when using '2. Advanced Install' in 'Easy' mode', as I have deemed that it is a safe decision.
P.S. Not had any negative feedback, but could it be that everyone elects for an 'Advanced' install to explicitly ignore that option. ?
Last edited:
Checking ntpd... dead.
Last edited:
Martineau
Part of the Furniture
So are you wanting/expecting to use the 'dead' Entware NTP Server?
If not, then I suggest that you uninstall it, or you should identify why it is 'dead' and fix it.
Last edited:
C
Chris_J
Guest
Thanks, I will test out the alpha version of the config and see how it goes.
Potential conflict with Diversion email functions if you’ve installed Unbound.
Diversion - the Router Ad-Blocker
Diversion - the Router Ad-Blocker
JemTheWire
Senior Member
Is that why I didn’t receive my weekly email stats from Diversion, I wonder?
Similar threads
Similar threads
Similar threads
-
Unbound Force all DNS requests through Unbound using iptables?- Started by muffintastic
- Replies: 14
-
-
-
-
-
-
Is it possible to use nord dns with unbound or any way to add it?- Started by Jack-Sparr0w
- Replies: 9
-
-
Unbound Use unbound/router as default DNS server
- Started by BeachGuy
- Replies: 2
-