Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    How to setup a Host Override

    Scheduled Pinned Locked Moved DHCP and DNS
    58 Posts 4 Posters 11.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • johnpozJ
      johnpoz LAYER 8 Global Moderator @jimfreeze
      last edited by johnpoz

      @jimfreeze if you would of left those just blank - they would point to interface address.

      Pointing to both pfsense and google is bad idea - you have no idea which of those your client might use. And if he asks google for your pfsense.local - he would get nx, and not going to ask any of his other listed NS for it - why should he - he got told it didn't exist, etc..

      you should only ever point client to NS that actually resolve the same way, be it with local records or with filtering, etc.. If you point to more than 1 NS, and they might not resolve stuff the same way you just asking for grief..

      edit: as to your rebind.. why would you not just access pfsense via its pfsense.home.arpa address? pfsense.local is not pfsense correct name, so yeah that could cause all kinds of issues..

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.8, 24.11

      J 1 Reply Last reply Reply Quote 0
      • J
        jimfreeze @johnpoz
        last edited by

        @johnpoz So, here is the general setup:

        Screen Shot 2021-11-12 at 9.52.42 AM.png

        I removed all Host Overrides on DNS Resolver

        And here is the DHCP Server

        Screen Shot 2021-11-12 at 9.53.36 AM.png

        Clients receive the following when connecting

        #
        search home.arpa
        nameserver 192.168.100.1
        

        I'm not understanding how to access "pfsense.home.arpa". It returns the following when doing a DNS Lookup test

        Screen Shot 2021-11-12 at 9.59.42 AM.png

        johnpozJ 1 Reply Last reply Reply Quote 0
        • johnpozJ
          johnpoz LAYER 8 Global Moderator @jimfreeze
          last edited by johnpoz

          @jimfreeze well you got something a bit wonky there.. the hostname of pfsense should resolve to its LAN ip..

          example.

          localIP.jpg

          Get rid of your allow wan dhcp to set dns in your general setup.. looks like your asking 192.168.1.254 for dns as well?

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.8, 24.11

          J 1 Reply Last reply Reply Quote 0
          • J
            jimfreeze @johnpoz
            last edited by

            @johnpoz As far as I can tell, pfsense is getting the 192.168.1.254 resolver when it gets its address via DHCP from the ATT modem.

            I have unchecked "Allow DNS server list to be overridden by DHCP/PPP on WAN" from the general setup.

            Still getting a failure on DNS lookup.

            Screen Shot 2021-11-12 at 2.24.57 PM.png

            johnpozJ 1 Reply Last reply Reply Quote 0
            • johnpozJ
              johnpoz LAYER 8 Global Moderator @jimfreeze
              last edited by

              @jimfreeze well is unbound even running? Pfsense name would what it resolves too out of the box..

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.8, 24.11

              J 1 Reply Last reply Reply Quote 0
              • J
                jimfreeze @johnpoz
                last edited by

                @johnpoz I don't think unbound is running.

                I went ahead and set up a Host Override for that domain.

                Thank you for all the help.

                Jim

                johnpozJ 1 Reply Last reply Reply Quote 0
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator @jimfreeze
                  last edited by johnpoz

                  @jimfreeze said in How to setup a Host Override:

                  I don't think unbound is running.

                  Then host overrides wouldn't be working either..

                  Do you have unbound listening on localhost? or All?

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                  J 1 Reply Last reply Reply Quote 0
                  • J
                    jimfreeze @johnpoz
                    last edited by

                    @johnpoz I'm not seeing unbound in the web GUI, but it has a process on the box.

                    unbound 84523   0.0  0.3  65236 28860  -  Ss   14:40      0:00.90 /usr/local/sbin/unbound -c /var/unbound/unbound.conf
                    
                    johnpozJ 1 Reply Last reply Reply Quote 0
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator @jimfreeze
                      last edited by

                      @jimfreeze go to status services do you see it running?

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                      J 1 Reply Last reply Reply Quote 0
                      • J
                        jimfreeze @johnpoz
                        last edited by

                        @johnpoz Ahh, yes, thank you. It is running.

                        johnpozJ 1 Reply Last reply Reply Quote 0
                        • johnpozJ
                          johnpoz LAYER 8 Global Moderator @jimfreeze
                          last edited by johnpoz

                          @jimfreeze well then it should timeout after 800 some ms.. for pfsense name.. Its right there in the file.. See mine sg4860.local.lan

                          shouldbetop.jpg

                          Again will ask - is it listening on all or if not all atleast has localhost (127.0.0.1) listed

                          listen.jpg

                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                          If you get confused: Listen to the Music Play
                          Please don't Chat/PM me for help, unless mod related
                          SG-4860 24.11 | Lab VMs 2.8, 24.11

                          J 1 Reply Last reply Reply Quote 0
                          • J
                            jimfreeze @johnpoz
                            last edited by

                            @johnpoz It appears to be listening on all.

                            Screen Shot 2021-11-12 at 3.58.13 PM.png

                            1 Reply Last reply Reply Quote 0
                            • U
                              Uglybrian
                              last edited by

                              Hi, I am not sure but maybe you need to clear your state table.

                              J 1 Reply Last reply Reply Quote 0
                              • J
                                jimfreeze @Uglybrian
                                last edited by

                                @uglybrian Hmmm. I reset the state table, and same result.

                                % ping pfsense.lan
                                ping: cannot resolve pfsense.lan: Unknown host
                                
                                johnpozJ 1 Reply Last reply Reply Quote 0
                                • johnpozJ
                                  johnpoz LAYER 8 Global Moderator @jimfreeze
                                  last edited by johnpoz

                                  @jimfreeze why would you think .lan would work, you were using .local or home.arpa

                                  What does your /etc/hosts file have in it?

                                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                                  If you get confused: Listen to the Music Play
                                  Please don't Chat/PM me for help, unless mod related
                                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                                  J 1 Reply Last reply Reply Quote 0
                                  • J
                                    jimfreeze @johnpoz
                                    last edited by

                                    @johnpoz I haven't added anything to /etc/hosts.

                                    Is home.arpa special in some way?

                                    johnpozJ 1 Reply Last reply Reply Quote 0
                                    • U
                                      Uglybrian
                                      last edited by

                                      It’s your host name and domain. So pfsense.home.arpa

                                      1 Reply Last reply Reply Quote 0
                                      • johnpozJ
                                        johnpoz LAYER 8 Global Moderator @jimfreeze
                                        last edited by johnpoz

                                        @jimfreeze home.arpa is the new standard use local domain.

                                        https://datatracker.ietf.org/doc/html/rfc8375
                                        Special-Use Domain 'home.arpa.'

                                        And yes not exactly sure what exact version of pfsense moved to it vs .localdomain.. But from your previous post that is what you showed as your pfsense name and domain.. pfsense.home.arpa

                                        I kept meaning to move to it from my local.lan - but have a lot certs I have created using local.lan in them, and just haven't bothered to switch yet.

                                        I haven't added anything to /etc/hosts.

                                        Please show it like I did - this will show us what pfsense fqdn should be and any host overrides, etc. you have created. I just snipped mine because I have a lot of stuff in there and was just wanting to what my sg4860.local.lan is listed in there from my general page setup.

                                        BTW - are you using pfblocker? And have something odd setup there? But pfsense from the diag host lookup should for sure be able to lookup its own name ;)

                                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                                        If you get confused: Listen to the Music Play
                                        Please don't Chat/PM me for help, unless mod related
                                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                                        J 2 Replies Last reply Reply Quote 0
                                        • J
                                          jimfreeze @johnpoz
                                          last edited by

                                          @johnpoz Thank you. That's great information.

                                          /etc/hosts looks standard to me.

                                          % cat /etc/hosts
                                          ##
                                          # Host Database
                                          #
                                          # localhost is used to configure the loopback interface
                                          # when the system is booting.  Do not change this entry.
                                          ##
                                          127.0.0.1	localhost
                                          255.255.255.255	broadcasthost
                                          ::1             localhost
                                          
                                          127.0.0.1	local.host
                                          

                                          I installed pfblocker a few hours ago. I just did the basic install.

                                          And, it still doesn't seem to be able to find the home.arpa domain.

                                          johnpozJ 1 Reply Last reply Reply Quote 0
                                          • johnpozJ
                                            johnpoz LAYER 8 Global Moderator @jimfreeze
                                            last edited by

                                            @jimfreeze that doesn't look like pfsense hosts file..

                                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                                            If you get confused: Listen to the Music Play
                                            Please don't Chat/PM me for help, unless mod related
                                            SG-4860 24.11 | Lab VMs 2.8, 24.11

                                            J 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.