• Issues with DNS Resolver / SNMP services going down

    6
    0 Votes
    6 Posts
    765 Views
    DerelictD

    Install more RAM

    Use less RAM

  • DHCP DDNS zone issue

    2
    0 Votes
    2 Posts
    513 Views
    L

    Quick update, manually inserting (/etc/inc/services.inc):
    zone 8-11.1.10.in-addr.arpa …
    does not do the job, but:
    zone 8.1.10.in-addr.arpa ...
    zone 9.1.10.in-addr.arpa ...
    zone 10.1.10.in-addr.arpa ...
    zone 11.1.10.in-addr.arpa ...
    does.

    How do I go about fixing this the proper way (so I get update proof resolution)?

  • Override Outgoing Interface on DNS Resolver

    3
    0 Votes
    3 Posts
    346 Views
    johnpozJ

    You would set a domain override… It would use whatever interface it is allowed to use per routing to get there... So if you have multiple wans and you have a route to 1.2.3.4 to use gateway A then it should use that gateway to get there.

    Resolving would work the same way based upon the route to get to the authoritative ns would determine which outgoing interface would be used.

  • Have somebody had success with this…?

    1
    0 Votes
    1 Posts
    248 Views
    No one has replied
  • DNS Slave TSIG and any custom options

    1
    0 Votes
    1 Posts
    251 Views
    No one has replied
  • Weird DNS queries on localhost

    5
    0 Votes
    5 Posts
    2k Views
    K

    My firewall is exhibiting the same symptoms. No unknown DNS calls on the LAN side, plenty on the WAN side. PFSense 2.4.2-RELEASE-p1 running the following packages.

    Suricata 4.0.3_1
    squid    0.4.43
    acme    0.2.2

    I'm not a fan of my firewall making connections to servers I did not explicitly state.

  • Nanostation Loco M2 not shown in DHCP Leases

    9
    0 Votes
    9 Posts
    1k Views
    DerelictD

    That all sounds like material for questions for Ubiquiti.

  • Infuriating DNS Issue

    1
    0 Votes
    1 Posts
    359 Views
    No one has replied
  • Different dhcp relays

    1
    0 Votes
    1 Posts
    256 Views
    No one has replied
  • Dynamic DNS doesn't work properly after reconnect

    4
    0 Votes
    4 Posts
    888 Views
    R

    What i did:
    I overrode the dns entry of carol.selfhost.de in the unbound settings. Hope it'll help.

  • Clearing DNS records created by DHCP

    12
    0 Votes
    12 Posts
    3k Views
    johnpozJ

    well you would need to clear the cache on dns server, and or clients local copy which would time out after the ttl expired which most likely would of been at most 1 hour.

  • Setting TTL for local for Unbound host overrides - Solved

    7
    0 Votes
    7 Posts
    4k Views
    S

    Until the Feature request goes through and Anyone who stumbles onto this thread this was my final resolution.

    I had already spent time entering all of the Local host values through the GUI.  So for starters I pulled a copy of /var/unbound/hosts_entries.conf via sftp.

    This gave me a complete file with all of my entries minus the TTL addition.

    Each entry looks something like this when the gui build it:

    local-data-ptr: "192.168.1.12 host.name" local-data: "host.name. A 192.168.1.122"

    For Each entry I simply changed these two lines to include the TTL value for my setup I wanted a 60 second TTL.

    local-data-ptr: "192.168.1.12 60 host.name" local-data: "host.name. 60 A 192.168.1.12"

    After adding the TTL values to the file I renamed it to "local_host_entries.conf" And then pushed it back to the server into the /var/unbound directory.  After pushing it up I needed to manually ssh into the box and change the ownership of the file to the unbound group.

    chown root:unbound local_host_entries.conf

    Now I needed to clear out all of the entries done through the GUI.  I tried simply dumping the host_entries.conf file, but that didn't work, so instead I was forced to manually delete all the entries through the GUI.  If any one finds an easier way please feel free to comment and tell us how.

    I then updated the Custom Options Section on the main tab on the DNS Resolver General setting page to include my file

    server: include: /var/unbound/local_host_entries.conf

    Note the server part is important, so be sure to include it.

    Now I simply had to apply the changes with the button at the top and like magic all my local entries were migrated to the new file I created with my chosen TTL settings.

    You can confirm the change with a dig command to one of your local host entries.

    The only downside to this is if I wanted to see all of my entries I have to pull a copy of the local_host_entries.conf.

    And if I need to add more I will have to add them through the local file if I want to adjust the TTL.

    Hopefully someone finds this helpful!

  • DNS randomly returns switch ip as client ip ??

    3
    0 Votes
    3 Posts
    345 Views
    johnpozJ

    DNS without a TTL would be nuts ;)

    Yes the default ttl for a host override or static reservation would be 3600 seconds or 1 hour.  I do not have normal dhcp clients register but would assume they would be the same.. If a client looks up some it would get that ttl..  It would not ask dns again for that fqdn until the ttl expires in the local clients cache.

    Unless you flush the clients local cache..

    windows can do this with

    ipconfig /flushdns

  • Additional DNS addr?

    6
    0 Votes
    6 Posts
    826 Views
    johnpozJ

    Under diagnostics, dns lookup

    Put something in there you are having a problem with looking up.

    Do a dig fqdn +trace from your client.. This will walk down from roots just like pfsense out of the box would.

  • Dnsmasq/unbound valid configs rejected by pfsense

    2
    0 Votes
    2 Posts
    346 Views
    johnpozJ

    So you want to run forwarder and unbound at same time?  There is a conflict not with the control port of 953 I do believe.

  • 0 Votes
    5 Posts
    3k Views
    GertjanG

    .. added to that : the whole boatload is DNSSEC certified, if the domain adopted DNSSEC.

  • How do I get charts and graphs like PiHole?

    3
    0 Votes
    3 Posts
    1k Views
    M

    I really like that! Pretty much exactly what I am looking for. I assume there is a way to sort by requester so I could, say focus in on what my TV is doing?

  • Quad9

    2
    0 Votes
    2 Posts
    401 Views
    M

    I'm using them, their secondary isn't mentioned much but it is 149.112.112.112. It works but I haven't tested speed.

  • PfSense serving old DNS records - DNS Resolver / unbound

    4
    0 Votes
    4 Posts
    4k Views
    johnpozJ

    Yes a dhcp reservation/static can be set to registered.  Doing so and then creating a host overrride with a different IP would give you 2 IPs for the same host name.

  • Problem DNS resolver and captive portal authentication

    1
    0 Votes
    1 Posts
    363 Views
    No one has replied
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.