Unbound What am I missing in setting up Unbound_Manager

[JGrana]

I had Unbound/Unbound_Manager running some time ago. Worked great.
My older AX88U failed so I upgraded to an AX88U Pro.
Never reinstalled Unbound_Manager.
I decided to install it today. Install went fine - but all my lan clients (according to dig) using the old 8.8.8.8

Is my DNS Director setup correctly?

And the WAN setting?

 

[Viktor Jaep]

I had Unbound/Unbound_Manager running some time ago. Worked great.
My older AX88U failed so I upgraded to an AX88U Pro.
Never reinstalled Unbound_Manager.
I decided to install it today. Install went fine - but all my lan clients (according to dig) using the old 8.8.8.8

Is my DNS Director setup correctly?

And the WAN setting?

This is how I've got mine setup using Unbound...

 

[JGrana]

Thanks @Viktor Jaep . Doing some testing now!

Hmmm, lan clients still using 8.8.8.8

I rebooted the router and one of the clients (Rpi). On the Pi, tried another dig snbforums.com. Still shows Server as 8.8.8.8.
I am running Tailmon if that makes any difference.
Also unbound_manager stats show all 0's.

I'm missing something.

 

[Tech9]

I guess you run Unbound as Resolver. This test has to show your WAN IP as only DNS server:

DNS Leak Test

The DNS Leak Test is a tool used to determine which DNS servers your browser is using to resolve domain names. This test attempts to resolve 50 randomly generated domain names, of which 25 are IPv4-only and 25 are IPv6-only.

browserleaks.com

 

[dave14305]

Is Unbound even running?

ps ww | grep unbound
netstat -nlup | grep ":53"
nvram get dhcp_dns1_x

 

[JGrana]

Is Unbound even running?

ps ww | grep unbound
netstat -nlup | grep ":53"
nvram get dhcp_dns1_x

Interesting. ps ww doesn't show it running:

admin@RT-AX88U_Pro-0BD8:/jffs/configs# ps ww | grep unbound
16448 pts/1    S+     0:00 grep unbound

But ps ax shows it:

admin@RT-AX88U_Pro-0BD8:/jffs/configs# ps ax | grep unbound
 2886 ?        I      0:00 [kworker/u8:1-events_unbound]
 5943 ?        Ss     0:14 unbound -c /opt/var/lib/unbound/unbound.conf
11576 ?        I      0:00 [kworker/u8:2-events_unbound]
17454 pts/1    S+     0:00 grep unbound

It has it's socket:

admin@RT-AX88U_Pro-0BD8:/tmp/home/root# netstat -nlup | grep ":53"
udp        0      0 127.0.0.1:53            0.0.0.0:*                           12302/dnsmasq
udp        0      0 192.168.1.1:53          0.0.0.0:*                           12302/dnsmasq
udp        0      0 0.0.0.0:5353            0.0.0.0:*                           8745/avahi-daemon:
udp        0      0 127.0.0.1:53535         0.0.0.0:*                           5943/unbound

Could this be the issue?:

admin@RT-AX88U_Pro-0BD8:/tmp/home/root# nvram get dhcp_dns1_x
8.8.8.8

Thanks for jumping in!

 

[dave14305]

Could this be the issue?:

Yes, remove 8.8.8.8 from LAN DHCP DNS. DNS Director in Router mode will prefer LAN DHCP DNS1 over the router’s IP address.

 

[JGrana]

Thanks @dave14305 , that did the trick!

 

[JGrana]

I guess you run Unbound as Resolver. This test has to show your WAN IP as only DNS server:

DNS Leak Test

The DNS Leak Test is a tool used to determine which DNS servers your browser is using to resolve domain names. This test attempts to resolve 50 randomly generated domain names, of which 25 are IPv4-only and 25 are IPv6-only.

browserleaks.com

Thanks. Once I removed the LAN DHCP DNS settings, it shows my WAN IP