====== PFSense - DNS - Troubleshooting - notice sendto failed Permission denied ======

Navigate to **Status -> System Logs -> System -> DNS Resolver**.

Many log message showing errors such as:

<code bash>
Mar 26 13:21:16 	unbound 	33572:0 	notice: sendto failed: Permission denied 
</code>

{{:pfsense:unbound:troubleshooting:pssense_dns_resolver_notice_sendto_failed_permission_denied.png?800|}}

----

===== Cause & Fix =====

==== IPv6 could be disabled on the WAN port ====

<WRAP info>
**NOTE:**  The resolver settings are not dynamically checking/applying upstream ipv4/6 connectivity but assuming both are active.

Simply ignore for these messages for now, or allow IPv6 on the WAN.

</WRAP>

----

==== Suricata may be blocking these addresses ====

Usually due to **ET DNS Query to a *.pw domain - Likely Hostile**.

----

==== Unbound may have crashed ====

In the past Unbound could crash with a buffer overflow.  

But this should have been fixed.

----