I saw someone else having this error awhile back, but they were using ISC DHCP.
After migrating from ISC to Kea DHCP, any new machines that are connecting can't get connectivity, ping, DNS, anything except DHCP, the new devices do pull their reserved IPs from kea. Existing devices work without issue, it's just new devices that have been added into the mix since migrating to Kea DHCP. The migration to kea may be coincidental, I am unsure.
Unbound proxies DNS requests to dnscrypt proxy, I will go through that components settings as well. I don't think dnscrypt would be the issue.
Unbound DNS Logs show (same error for all newer devices):
```
2024-05-09T01:06:46-06:00 Notice unbound [67860:2] notice: remote address is 10.0.2.223 port 8735
2024-05-09T01:06:46-06:00 Notice unbound [67860:2] notice: sendto failed: Invalid argument
```
The fix for the previous user was to make sure in ISC that 'Deny unknown clients' was unchecked. I can't find anything similar for Kea DHCP.
On my machine, ISC DHCP is not enabled, only Kea DHCP is but, the static leases are still defined in ISC config. I don't think that's the issue, as 10.0.2.221-224 are new machines and are not defined in ISC.
I followed the links in these opnsense forum issue and found the solution for ISC. Looking for some advice as I am stumped.
https://forum.opnsense.org/index.php?topic=16872.0
https://forum.opnsense.org/index.php?topic=16908.msg76956#msg76956
Thanks!
It suggests you have pinned your outgoing interfaces in Unbound and it's trying to send something over an interface that is not there or not connected.
Everyone repeat after me:
There's a reason for the "recommended" part in Interfaces: all (recommended)"
