I believe I'm having issues with DNS

[Mastadamus]

I think something is going wrong with my new cloudron build. First I ran into DNS issues with the install script and had to do --redo.. Now I've had the email outbound SMTP randomly turn red and give me a "getaddrinfo EAI_AGAIN smtp.mailgun.org:587" error. I also have things like Rocketchat gif plugins start failing to find gifs, and I also had a container update error.. All of this corrects itself when I restart unbound. I've checked the unbound logs though and I see no issues. Any ideas?

[Mastadamus]

Note, my cloudron build is on ubuntu 20.04. This is a fresh install. I've SSH' on the box and curl'd google when I started having DNS troubles, and it wouldn't resolve. I restarted unbound(even though it was showing green) and It immediately started working. If i wait a period of time, something breaks again, and I start having resolver issues.

[Mastadamus]

@Mastadamus Also note, i've seen nothing blocked outbound from my firewall for this host.

[Mastadamus]

@Mastadamus It just randomly can't resolve mailgun

[Mastadamus]

@Mastadamus

[Mastadamus]

@Mastadamus Then I restart Unbound and boom.. can resolve mailgun. This last time it seemed only mail gun was affected. Previous times I couldn't even resolve google

[girish]

@Mastadamus Looks like some DNSSEC error. Can you try disabling DNSSEC as described here - https://docs.cloudron.io/troubleshooting/#dns ?

[Mastadamus]

@girish I ended up configuring a forward lookup zone and forward all requests to my other internal dns server and now it works great. I will try some troubleshooting this week.

[girish]

@Mastadamus From the earlier screenshot you posted, the issue seems to be "Could not establish chain of trust". So, I would investigate that angle (which is DNSSEC related)