pfSense

I found that I need to specify

server:
private-domain: "kcilink.com" 
private-domain: "m1e.net" 
private-domain: "mailermailer.com" 
private-domain: "khera.org" 

And it works, even though the private-domain entires are still all smashed into one line.

Did you upgrade this system from 2.1.x with unbound package installed? The upgrade code had an issue, it was using ; to separate fields during migration. It was fixed in 387ab31a976fbacfc0d8e2fde7efb7cb1c4b6b6b where ; was replaced by newline

No, it was a vanilla 2.1.5 system in a vm. I use it for testing things, then revert the image to the base system with just the IP addresses configured.

I guess I was unclear. It was a vanilla 2.1.5 system I upgraded to 2.2-RC for testing.

Ah ok, please try to update to a more recent snapshot, it should be fixed now. Seems to be same issue of #4104

No, this did not fix the problem.

I did some experimentation and discovered that if I enter the above configuration without double quotes, the lines are not smashed together. For example:

server:
private-domain: "kcilink.com" 
private-domain: "m1e.net" 
private-domain: mailermailer.com
private-domain: khera.org

Results in the following config in unbound.conf:

server:
private-domain: "kcilink.com"private-domain: "m1e.net"private-domain: mailermailer.com
private-domain: khera.org

So it looks like you have some issues with lines ending in double quotes.

I'm using the 20141224-0520 upgrade image.

I can paste in exactly what you have above:

server:
private-domain: "kcilink.com" 
private-domain: "m1e.net" 
private-domain: "mailermailer.com" 
private-domain: "khera.org" 

and my unbound.conf ends up with:

# Unbound custom options
server:
private-domain: "kcilink.com" 
private-domain: "m1e.net" 
private-domain: "mailermailer.com" 
private-domain: "khera.org" 

with the exact same correct line endings.

Are there still remnants of the old unbound package in /usr/local/pkg/ on your system or something? This is definitely fixed in 2.2.

Chris has put a little different - Vick's example does not have the double-quotes on the last 2 lines.
In any case, I tried:
server:
private-domain: "kcilink.com"
private-domain: "m1e.net"
private-domain: mailermailer.com
private-domain: khera.org
and got
# Unbound custom options
server:
private-domain: "kcilink.com"
private-domain: "m1e.net"
private-domain: mailermailer.com
private-domain: khera.org
which is the expected result.

This was a 2.1.3 install into a VM, upgrade to 2.1.5, then upgraded to 2.2-RC (and again to the 12/24 snapshot). There was never unbound installed on it. I used it to test out the pfblocker package only.

If you want a copy of the VMware image let me know. I run it under VMware Fusion on my mac, and it still has the snapshot from prior to the 2.2 upgrade.

Otherwise, I guess forget about this since you cannot reproduce.

Any chance we could get the exact config.xml section that exhibited the problem?

as soon as i enter the below line in advanced config box and hit save and apply, dns resolver stops working and wont start at all

log-queries: yes

error i get is this

php-fpm⁸³⁵⁸⁵: /services_unbound.php: The command '/usr/local/sbin/unbound -c /var/unbound/unbound.conf' returned exit code '1', the output was '/var/unbound/unbound.conf:89: error: syntax error read /var/unbound/unbound.conf failed: 1 errors in configuration file [1419919488] unbound[34655:0] fatal error: Could not read config file: /var/unbound/unbound.conf'

that's legitimately wrong syntax Bipin, not related to this, see forum.

Applied in changeset cfb5073f83fa80e5b40476b12ea91ff5114c60fc.