How to setup a Host Override
-
@jimfreeze said in How to setup a Host Override:
I don't think unbound is running.
Then host overrides wouldn't be working either..
Do you have unbound listening on localhost? or All?
-
@johnpoz I'm not seeing unbound in the web GUI, but it has a process on the box.
unbound 84523 0.0 0.3 65236 28860 - Ss 14:40 0:00.90 /usr/local/sbin/unbound -c /var/unbound/unbound.conf -
@jimfreeze go to status services do you see it running?
-
@johnpoz Ahh, yes, thank you. It is running.
-
@jimfreeze well then it should timeout after 800 some ms.. for pfsense name.. Its right there in the file.. See mine sg4860.local.lan
Again will ask - is it listening on all or if not all atleast has localhost (127.0.0.1) listed
-
@johnpoz It appears to be listening on all.
-
Hi, I am not sure but maybe you need to clear your state table.
-
@uglybrian Hmmm. I reset the state table, and same result.
% ping pfsense.lan ping: cannot resolve pfsense.lan: Unknown host -
@jimfreeze why would you think .lan would work, you were using .local or home.arpa
What does your /etc/hosts file have in it?
-
@johnpoz I haven't added anything to /etc/hosts.
Is
home.arpaspecial in some way? -
It’s your host name and domain. So pfsense.home.arpa
-
@jimfreeze home.arpa is the new standard use local domain.
https://datatracker.ietf.org/doc/html/rfc8375
Special-Use Domain 'home.arpa.'And yes not exactly sure what exact version of pfsense moved to it vs .localdomain.. But from your previous post that is what you showed as your pfsense name and domain.. pfsense.home.arpa
I kept meaning to move to it from my local.lan - but have a lot certs I have created using local.lan in them, and just haven't bothered to switch yet.
I haven't added anything to /etc/hosts.
Please show it like I did - this will show us what pfsense fqdn should be and any host overrides, etc. you have created. I just snipped mine because I have a lot of stuff in there and was just wanting to what my sg4860.local.lan is listed in there from my general page setup.
BTW - are you using pfblocker? And have something odd setup there? But pfsense from the diag host lookup should for sure be able to lookup its own name ;)
-
@johnpoz Thank you. That's great information.
/etc/hostslooks standard to me.% cat /etc/hosts ## # Host Database # # localhost is used to configure the loopback interface # when the system is booting. Do not change this entry. ## 127.0.0.1 localhost 255.255.255.255 broadcasthost ::1 localhost 127.0.0.1 local.hostI installed pfblocker a few hours ago. I just did the basic install.
And, it still doesn't seem to be able to find the home.arpa domain.
-
@jimfreeze that doesn't look like pfsense hosts file..
-
@johnpoz Looking at the link you set, should the domain setting under general setup be
home.arpa.and nothome.arpa? -
-
@johnpoz Hey, sorry about that. I saw your post and responded, but it didn't go through.
cat /etc/hosts 127.0.0.1 localhost localhost.home.arpa ::1 localhost localhost.home.arpaBTW, I'm not sure how this setup has changed, but it NOW recognizes pfsense.home.arpa, without a host override.
-
@jimfreeze said in How to setup a Host Override:
without a host override.
Because you shouldn't have to do that - since that is pfsense default name.
Now can your clients resolve pfsense.home.arpa? And can you access the webgui via that name.
But your failing to show your full hosts file - since your not showing pfsense.home.arpa in there and just the first 2 lines..
-
@johnpoz Yes, clients can ping
pfsense.home.arpaand web access also works.That is the full
/ect/hostsfile.8) Shell Enter an option: 8 [21.05.2-RELEASE][admin@pfSense.home.arpa]/root: cat /etc/hosts 127.0.0.1 localhost localhost.home.arpa ::1 localhost localhost.home.arpa [21.05.2-RELEASE][admin@pfSense.home.arpa]/root: -
@jimfreeze how exactly would you be resolving pfsense.home.arpa if its not in your hosts file?
edit: ah look in here
cat /var/unbound/host_entries.conf
