From owner-freebsd-questions@freebsd.org  Thu Oct 12 15:32:56 2017
Return-Path: <owner-freebsd-questions@freebsd.org>
Delivered-To: freebsd-questions@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 01389E2CEC3
 for <freebsd-questions@mailman.ysv.freebsd.org>;
 Thu, 12 Oct 2017 15:32:56 +0000 (UTC)
 (envelope-from freebsd@erwanlegrand.com)
Received: from relay5-d.mail.gandi.net (relay5-d.mail.gandi.net
 [217.70.183.197])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id BE8A980F25
 for <freebsd-questions@freebsd.org>; Thu, 12 Oct 2017 15:32:55 +0000 (UTC)
 (envelope-from freebsd@erwanlegrand.com)
X-Originating-IP: 209.85.192.180
Received: from mail-pf0-f180.google.com (mail-pf0-f180.google.com
 [209.85.192.180]) (Authenticated sender: moi@erwan.legrand.name)
 by relay5-d.mail.gandi.net (Postfix) with ESMTPSA id 3132141C09B
 for <freebsd-questions@freebsd.org>; Thu, 12 Oct 2017 17:32:53 +0200 (CEST)
Received: by mail-pf0-f180.google.com with SMTP id t188so2823743pfd.10
 for <freebsd-questions@freebsd.org>; Thu, 12 Oct 2017 08:32:52 -0700 (PDT)
X-Gm-Message-State: AMCzsaVg9QSA3aR8LI+8LZ30qpnFAddyKAWBKFnYkdH2C711sqMkQ2AC
 9Ko5r/oO9DnYAOz7VgFPk2OCm1eusYrrnLVIDsM=
X-Google-Smtp-Source: AOwi7QA5qfbPjXfVtW86i3CkBtU4np76VHVw1EdezyJC5Ht6cWduhyLpMpMgzBxNb8UUbakBlba3LAKRSf6gwO5lphQ=
X-Received: by 10.159.198.140 with SMTP id g12mr558279plo.34.1507822371396;
 Thu, 12 Oct 2017 08:32:51 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.100.155.10 with HTTP; Thu, 12 Oct 2017 08:32:50 -0700 (PDT)
In-Reply-To: <1468.1507784248@segfault.tristatelogic.com>
References: <1468.1507784248@segfault.tristatelogic.com>
From: Erwan Legrand <freebsd@erwanlegrand.com>
Date: Thu, 12 Oct 2017 17:32:50 +0200
X-Gmail-Original-Message-ID: <CA+4G5KY727cJ=Lp-hU77DH03d+Kw9iHD9cpBUqT24h7jWDPYLw@mail.gmail.com>
Message-ID: <CA+4G5KY727cJ=Lp-hU77DH03d+Kw9iHD9cpBUqT24h7jWDPYLw@mail.gmail.com>
Subject: Re: Unbound(8) caching resolver no workie on fresh install :-(
To: "Ronald F. Guilmette" <rfg@tristatelogic.com>
Cc: FreeBSD Questions <freebsd-questions@freebsd.org>
Content-Type: text/plain; charset="UTF-8"
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.23
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions/>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 12 Oct 2017 15:32:56 -0000

On Thu, Oct 12, 2017 at 6:57 AM, Ronald F. Guilmette
<rfg@tristatelogic.com> wrote:
> After the install finished and I booted the new system, I immediately
> got some console errors indicating that the various default NTP servers
> (I also enabled NTP) were not resolving. :-(

This could happen if you forward queries to servers which strip DNSSEC
signatures. If that is the case, you have two options: either you stop
forwarding to these servers or your disable the DNSSEC support in
Unbound.