Differences

This shows you the differences between two versions of the page.

--- pfsense:dns:troubleshooting:notice_sendto_failed_permission_denied [2021/01/06 14:10] – peter
+++ pfsense:dns:troubleshooting:notice_sendto_failed_permission_denied [2021/01/06 14:22] (current) – peter
@@ Line 13: / Line 13: @@
 ----
-===== Cause =====
+===== Cause & Fix =====
-The resolver settings are not dynamically checking/applying upstream ipv4/6 connectivity but assuming both are active.
+==== IPv6 could be disabled on the WAN port ====
+<WRAP info>
+**NOTE:**  The resolver settings are not dynamically checking/applying upstream ipv4/6 connectivity but assuming both are active.
+Simply ignore for these messages for now, or allow IPv6 on the WAN.
+</WRAP>
 ----
-===== Fix =====
+==== Suricata may be blocking these addresses ====
-Enable or disable whether ip6 queries are answered or issued.  Default is yes.
+Usually due to **ET DNS Query to a *.pw domain - Likely Hostile**.
-If disabled, queries are not answered on IPv6, and queries are not sent on IPv6 to the internet name-servers.
+----
-With this option you can disable the ipv6 transport for sending DNS traffic, it does not impact the contents of the DNS traffic, which may have ip4 and ip6 addresses in it.
+==== Unbound may have crashed ====
+In the past Unbound could crash with a buffer overflow.
+But this should have been fixed.
+----