Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    1. Home
    2. pfSense® Software
    3. DHCP and DNS
    Log in to post
    • Newest to Oldest
    • Oldest to Newest
    • Most Posts
    • Most Votes
    • Most Views
    • jimp

      HEADS UP: Be aware of Trusted Recursive Resolver (TRR) in Firefox
      • jimp

      85
      14
      Votes
      85
      Posts
      14713
      Views

      kiokoman

      @Bob-Dig idk it's not my phone, if it's "Private DNS" settings than it was probably on by default, my family does not know what dot / doh is

      @johnpoz exactly

    • jimp

      RFC2136 Server Setup How-to
      • jimp

      19
      0
      Votes
      19
      Posts
      28198
      Views

      Gertjan

      You have some logs as showed above ?

    • T

      Wildcard DNS entries
      • tommyboy180

      6
      0
      Votes
      6
      Posts
      25811
      Views

      C

      @Yowsers:

      This is in the wiki as well.
      https://doc.pfsense.org/index.php/Wildcard_Records_in_DNS_Forwarder/Resolver

      Yes - and that page also misses a big gotcha.

      As someone coming from dnsmasq / "forwarder"  I had multiple host overrides too.

      Unbound / resolver refuses to start if you set up a wildcard subdomain AND have host overrides that match.  So you need to delete all the host overrides that use the same subdomain.

      If you want to override a host in your domain override with unbound, best to do it on the resolver at which you are pointing.

    • T

      This topic is deleted!
      • theliwe

      1
      0
      Votes
      1
      Posts
      4
      Views

      No one has replied

    • S

      This topic is deleted!
      • SamCurran

      1
      0
      Votes
      1
      Posts
      3
      Views

      No one has replied

    • L

      Website Unable to Connect Error
      • LPD7

      4
      0
      Votes
      4
      Posts
      206
      Views

      L

      @steveits Not sure if I resolved yet as had mem issues that had to be fixed, I did start adding sites manually to a white list which seems to solve some problems but not yet all. Am going to swing back around and see if I can get more info to share and hopefully resolve.

    • B

      DHCP 169x IP until i reconnect LAN cable or Turn WIFI on or OFF
      • Brian Smit

      4
      0
      Votes
      4
      Posts
      85
      Views

      johnpoz

      @brian-smit said in DHCP 169x IP until i reconnect LAN cable or Turn WIFI on or OFF:

      reuse_lease: lease age 1217 (secs) under 25% threshold, reply with unaltered, existing lease "

      Those are common - leases normally don't start to renew until 50% done. But as the client gets closer and closer to lease expire, it should start screaming for a renew.. Sending them more and more often.

      Once a renew fails - it should send a discover..

      I would watch your logs the next time it happens and look right away, set your log to keep more in the gu.. I think it defaults to only the last 50 entries. I have mine set at 2000.. This should allow you to see more entries.

    • G

      One account, but more domains (noip)
      • gusto

      1
      0
      Votes
      1
      Posts
      52
      Views

      No one has replied

    • C

      Certain domains failing in DNS Resolver/unbound
      • CLEsports

      21
      0
      Votes
      21
      Posts
      231
      Views

      C

      @johnpoz 👍 No problem, all water under the bridge. Maybe this lengthy thread will be help to someone in the future in regular Resolver mode.

      I should have been more clear in my post too. I knew the DNS Forwarder was dnsmasq and wanted to make sure someone knew it was unbound instead. Next time I'll state it upfront which mode I'm running in.

      I learned more abound unbound and some dig queries along the way which is always helpful. Thanks again!

    • randombits

      Local IP's resolved from names ?
      • randombits

      4
      0
      Votes
      4
      Posts
      157
      Views

      Bob.Dig

      @randombits said in Local IP's resolved from names ?:

      under host overrides ?

      yes

    • H

      Dynamic DNS update to Digital Ocean doesn't work...
      • h4ns

      1
      0
      Votes
      1
      Posts
      90
      Views

      No one has replied

    • S

      DHCP Option 121
      • skyberry

      1
      0
      Votes
      1
      Posts
      87
      Views

      No one has replied

    • B

      getting out of IP-addresses
      • Brian Smit

      12
      0
      Votes
      12
      Posts
      197
      Views

      JKnott

      @bingo600 said in getting out of IP-addresses:

      Offcause i meant DHCP lease

      Yeah, right. 😉

    • G

      This topic is deleted!
      • gester

      2
      0
      Votes
      2
      Posts
      13
      Views
    • G

      protecting the (PFsense)
      • gester

      1
      0
      Votes
      1
      Posts
      96
      Views

      No one has replied

    • G

      can dhcp server relay to another interface
      • gwaitsi

      13
      0
      Votes
      13
      Posts
      240
      Views

      G

      @johnpoz constraint is a solid brick house. i had cat 7 cables run throughout the house to the boiler room. so for the small environment i have, it is easier in this case, to work with s/w configs that to physically run new cables, etc;

    • G

      DHCP Server doesn't show bridge interface
      • gwaitsi

      1
      0
      Votes
      1
      Posts
      99
      Views

      No one has replied

    • A

      pfSense DHCP with Active Directory DNS Windows Server 2016
      • awaisraza308

      4
      0
      Votes
      4
      Posts
      163
      Views

      bmeeks

      One issue you will face if you use the DHCP server on pfSense is that hostnames of local clients will not be registered in DNS in AD. That may or may not be of concern for your setup.

      And you don't want to turn on DHCP DNS updates within pfSense as that will cause the unbound daemon to be restarted each time a client renews its lease. There are many posts on the forum about that little gotcha. DNS can be dead for many seconds during that restart, and the dead time is greatly expanded when you use tools such as pfBlockerNG-devel and DNSBL.

      In my opinion, if you have an Active Directory shop, you really should let most of the DNS and DHCP infrastructure be hosted within AD. And in Windows 2016 and up, AD supports DHCP failover if you install the service on multiple hosts.

    • B

      DHCP server | working great but
      • Brian Smit

      4
      0
      Votes
      4
      Posts
      174
      Views

      johnpoz

      @brian-smit so they are still on their normal address is some rfc1918 address, not the APIPA 169.254 address.

      You sure just not an issue with your unbound restarting with dhcp reservations.. Has been a long time issue where when a lease is issued or renewed, etc. that unbound restarts and if your using pfblocker that can cause start up delays, etc. this can present itself as dns not working - but its just dns is restarting.

      One solution to that is not register dhcp leases in unbound settings.

    • F

      Domain Overrides for VPN multi site
      • focheur91300

      3
      0
      Votes
      3
      Posts
      145
      Views

      F

      Hello @viragomann,
      The problem is DNSSEC.
      Thanks again.

    • M

      which order client resolve DNS request
      • M0L50N

      7
      0
      Votes
      7
      Posts
      680
      Views

      T

      If you have a Windows AD you need to configure only the IP of the DCs on clients.
      Windows with domain could have weird behavior if clients use a non DC DNS server.
      You have to configure the DCs to forward to the other DNS servers.
      The best approach is having at least 2 DC to have some redundancy, and configure both IPs on clients.

    • B

      Protect Gateway IP address
      • Brian Smit

      4
      0
      Votes
      4
      Posts
      220
      Views

      B

      @cool_corona

      Thank You both !

      I indeed going to make sure that nobody can plug things into the switches and i change the 192.168.x.x into something else

    • 3

      DDNS with DigitalOcean API "invalid character '-' in numeric literal","request_id"
      ddns • • 3freet

      5
      0
      Votes
      5
      Posts
      202
      Views

      bmeeks

      There is an open bug for Digital Ocean dynamic DNS logged in Redmine: https://redmine.pfsense.org/issues/13167.

    • N

      Netgate 2100 dns resolver reconfiguration takes very long
      • n300

      7
      0
      Votes
      7
      Posts
      221
      Views

      N

      @keyser Ok. But if I disable pfblockerNG (not uninstalling it), it's not significantly faster? I also don't have many subscriptions. Only the basic/default Blacklist is enabled.

    • H

      DNS/DHCP not working
      • hunor

      1
      0
      Votes
      1
      Posts
      105
      Views

      No one has replied

    • M

      Unable to see or remove errant static maping
      • minoe

      1
      0
      Votes
      1
      Posts
      168
      Views

      No one has replied

    • M

      pfSense as router/firewall for home lab and dns failure to main router
      • m9x3mos

      4
      0
      Votes
      4
      Posts
      346
      Views

      bingo600

      @m9x3mos
      Remember to add the OpenVPN "Client network" to the "unbound resolver ACL's" , else unbound will reject the lookup.
      And i assume you have permitted TCP/UDP 53 from OpenVPN clients to the pfSense interface you announce as openVPN dns server ip.

      Edit:
      I think there's a "feature" in unbound , where it would reject RFC1918 dns answers (from the asus) unless being told to accept them.

      @johnpoz
      Could you share a hint here ?

      /Bingo

    • M

      DNS Forwarder not resolving
      • marama

      4
      0
      Votes
      4
      Posts
      311
      Views

      bingo600

      @marama
      You are saying all your local name resolving is based on host overrides ?
      That could be done with unbound (resolver) too.

      I have no experience with the DNS forwarder.

      Sorry

      /Bingo

    • D

      Dynamic DNS - Azure (22.01-RELEASE (arm))
      22.01 azure ddns netgate-sg-3100 • • DavidIr

      1
      0
      Votes
      1
      Posts
      188
      Views

      No one has replied

    • D

      Having no success creating a 2 level DDNS domain using PFsense and Namecheap
      • dnessett

      9
      0
      Votes
      9
      Posts
      693
      Views

      N

      @steveits Very helpful thank you. This got me going!

    • W

      DCHP not sending router/gateway to endpoint after fresh install
      • wildfrog

      27
      0
      Votes
      27
      Posts
      612
      Views

      W

      @jimp Thanks. That makes sense. Just seems that it was a change for versions after 2.5. Now I know it's expected behavior going forward and will get sorted when the device is configured.

    • S

      DNS Resolver doesn't process queries through Wireguard full tunnel
      • Stan

      3
      0
      Votes
      3
      Posts
      524
      Views

      S

      Solved by watching a video from Christian McDonald. The change was to the settings in the peer (client) app. I set the DNS address to the tunnel address (192.168.85.1) rather than my pfSense address.

    • A

      Unbound DNS RPZ
      • asus

      2
      0
      Votes
      2
      Posts
      453
      Views

      A

      Figured it out

      server: module-config: "respip validator iterator" rpz: name: adguard-cname-cloak zonefile: zonefiles/adguard-cname-cloak.zone url: https://raw.githubusercontent.com/AdguardTeam/cname-trackers/master/combined_disguised_trackers_rpz.txt rpz-action-override: nxdomain rpz-log: yes rpz-log-name: adguard-cname-cloak

      Unbound now logging blocked domains

      [34470:3] info: RPZ applied [adguard-cname-cloak] a8.looop-denki.com. nxdomain 10.0.0.2@42033 a8.looop-denki.com. A IN

      dig reponse

      ; <<>> DiG 9.16.25 <<>> a8.looop-denki.com ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12872 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;a8.looop-denki.com. IN A
    • S

      Pfsense Can't get WAN IP
      • sbwcws

      7
      0
      Votes
      7
      Posts
      379
      Views

      R

      @sbwcws Unclear - it's not supported as far as I can tell. I'd open a new topic in what you think might be the most appropriate spot or search the forums for other's past inquiries or attempts.

    • T

      DNS Resolver Authoritative for local.lan
      • toluun

      4
      0
      Votes
      4
      Posts
      338
      Views

      T

      @toluun

      Seems to be an issue with my linux installation. If I specify the dns server it responds as expected.

      dig @192.168.20.1 notthere.local.lan
    • N

      Bug with Cloudflare Dynamic DNS causing data loss
      • NetworkCowboy

      1
      0
      Votes
      1
      Posts
      264
      Views

      No one has replied

    • L

      Issue with Reverse Zone in Bind
      bind dns reverse ptr • • linq

      2
      0
      Votes
      2
      Posts
      462
      Views

      L

      Anyone that has insight to share about Bind DNS PTR record troubleshooting?

    • C

      2.6.0-RELEASE - DHCP OMAPI still not working?
      • CapitanBlack

      3
      0
      Votes
      3
      Posts
      976
      Views

      C

      Anyone? Please help to solve this very old issue.
      Thank you!

    • W

      DCHP not sending router/gateway to endpoint after fresh install
      • wildfrog

      2
      0
      Votes
      2
      Posts
      471
      Views

      Derelict

      @wildfrog What is listed as the router in the DHCP server on LAN?

      If you really, really want to see what is going on, packet capture the DHCP traffic on the LAN and post it. Particularly interested in the DHCPOFFER from the server.

    • L

      BIND DNS works for client, however netgate can't resolve any names
      dns bind • • linq

      2
      0
      Votes
      2
      Posts
      573
      Views

      L

      For future reference, problem was caused by a misconfigured setting in General Setup -> DNS Server Settings - DNS Resolution Behaviour.
      Setting changed to Use Local DNS, Fall back to remote DNS Servers

    • undefined


      •


      Votes

      Posts

      Views