DNS issue on Raspberry Pi 3 B+

[oreillyjw]

Describe the issue

I used the minim-config to setup my Pi and setup with all the defaults and setup my account on minim.co

When I connect to pi for example with my laptop I am unable to connect to google.com. However, if I change the default dns server, which is my pi's local ip address as my dns server then it works just fine.

Here is the output of the unum agent

pi@raspberrypi:~ $ sudo service unum status
● unum.service - Unum agent
   Loaded: loaded (/etc/systemd/system/unum.service; disabled; vendor preset: enabled)
   Active: active (running) since Tue 2019-04-30 01:22:34 BST; 10min ago
     Docs: https://github.com/MinimSecure/unum-sdk
 Main PID: 1592 (unum)
   CGroup: /system.slice/unum.service
           ├─1592 /opt/unum/bin/unum --cfg-file /etc/opt/unum/config.json
           └─1625 /opt/unum/bin/unum --cfg-file /etc/opt/unum/config.json

Apr 30 01:22:34 raspberrypi systemd[1]: Started Unum agent.
Apr 30 01:22:36 raspberrypi unum[1592]: iptables v1.6.0: Couldn't load target `unum_forward':No such file or directory
Apr 30 01:22:36 raspberrypi unum[1592]: Try `iptables -h' or 'iptables --help' for more information.
Apr 30 01:22:36 raspberrypi unum[1592]: iptables: No chain/target/match by that name.
Apr 30 01:22:36 raspberrypi unum[1592]: iptables: No chain/target/match by that name.

Environment

pi@raspberrypi:~ $ lsb_release -a
No LSB modules are available.
Distributor ID:	Raspbian
Description:	Raspbian GNU/Linux 9.9 (stretch)
Release:	9.9
Codename:	stretch

Expected behavior

Connect to the internet

How I resolved the issue

I added dns server to the dnsmasq.conf with server=8.8.8.8

After the pi boots up, I need to restart dnsmasq (sudo service dnsmasq restart) and then dns starts working on connected devices

    pi@raspberrypi:~ $ sudo cat /etc/opt/unum/dnsmasq.conf
    # This file contains a base configuration for dnsmasq.
    # Copy this file to /etc/dnsmasq.conf and edit as necessary.
    # See http://www.thekelleys.org.uk/dnsmasq/docs/dnsmasq-man.html
    local=/lan/
    domain=lan
    expand-hosts
    dhcp-authoritative
    domain-needed
    bogus-priv
    localise-queries
    stop-dns-rebind
    rebind-localhost-ok
    bind-interfaces
    local-service
->  server=8.8.8.8

    # Remaining required config options:
    #interface=lo,wlan0
    #dhcp-range=192.168.127.100,192.168.127.150,12h
    dhcp-range=192.168.15.100,192.168.15.150,12h
    interface=lo,br-lan

This probably isn't a permanent solution, since it doesn't work when I reboot the pi