Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    How to setup a Host Override

    Scheduled Pinned Locked Moved DHCP and DNS
    58 Posts 4 Posters 11.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • johnpozJ
      johnpoz LAYER 8 Global Moderator @jimfreeze
      last edited by johnpoz

      @jimfreeze well then it should timeout after 800 some ms.. for pfsense name.. Its right there in the file.. See mine sg4860.local.lan

      shouldbetop.jpg

      Again will ask - is it listening on all or if not all atleast has localhost (127.0.0.1) listed

      listen.jpg

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.8, 24.11

      J 1 Reply Last reply Reply Quote 0
      • J
        jimfreeze @johnpoz
        last edited by

        @johnpoz It appears to be listening on all.

        Screen Shot 2021-11-12 at 3.58.13 PM.png

        1 Reply Last reply Reply Quote 0
        • U
          Uglybrian
          last edited by

          Hi, I am not sure but maybe you need to clear your state table.

          J 1 Reply Last reply Reply Quote 0
          • J
            jimfreeze @Uglybrian
            last edited by

            @uglybrian Hmmm. I reset the state table, and same result.

            % ping pfsense.lan
            ping: cannot resolve pfsense.lan: Unknown host
            
            johnpozJ 1 Reply Last reply Reply Quote 0
            • johnpozJ
              johnpoz LAYER 8 Global Moderator @jimfreeze
              last edited by johnpoz

              @jimfreeze why would you think .lan would work, you were using .local or home.arpa

              What does your /etc/hosts file have in it?

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.8, 24.11

              J 1 Reply Last reply Reply Quote 0
              • J
                jimfreeze @johnpoz
                last edited by

                @johnpoz I haven't added anything to /etc/hosts.

                Is home.arpa special in some way?

                johnpozJ 1 Reply Last reply Reply Quote 0
                • U
                  Uglybrian
                  last edited by

                  It’s your host name and domain. So pfsense.home.arpa

                  1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator @jimfreeze
                    last edited by johnpoz

                    @jimfreeze home.arpa is the new standard use local domain.

                    https://datatracker.ietf.org/doc/html/rfc8375
                    Special-Use Domain 'home.arpa.'

                    And yes not exactly sure what exact version of pfsense moved to it vs .localdomain.. But from your previous post that is what you showed as your pfsense name and domain.. pfsense.home.arpa

                    I kept meaning to move to it from my local.lan - but have a lot certs I have created using local.lan in them, and just haven't bothered to switch yet.

                    I haven't added anything to /etc/hosts.

                    Please show it like I did - this will show us what pfsense fqdn should be and any host overrides, etc. you have created. I just snipped mine because I have a lot of stuff in there and was just wanting to what my sg4860.local.lan is listed in there from my general page setup.

                    BTW - are you using pfblocker? And have something odd setup there? But pfsense from the diag host lookup should for sure be able to lookup its own name ;)

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                    J 2 Replies Last reply Reply Quote 0
                    • J
                      jimfreeze @johnpoz
                      last edited by

                      @johnpoz Thank you. That's great information.

                      /etc/hosts looks standard to me.

                      % cat /etc/hosts
                      ##
                      # Host Database
                      #
                      # localhost is used to configure the loopback interface
                      # when the system is booting.  Do not change this entry.
                      ##
                      127.0.0.1	localhost
                      255.255.255.255	broadcasthost
                      ::1             localhost
                      
                      127.0.0.1	local.host
                      

                      I installed pfblocker a few hours ago. I just did the basic install.

                      And, it still doesn't seem to be able to find the home.arpa domain.

                      johnpozJ 1 Reply Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator @jimfreeze
                        last edited by

                        @jimfreeze that doesn't look like pfsense hosts file..

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        J 1 Reply Last reply Reply Quote 0
                        • J
                          jimfreeze @johnpoz
                          last edited by

                          @johnpoz Looking at the link you set, should the domain setting under general setup be home.arpa. and not home.arpa?

                          johnpozJ 1 Reply Last reply Reply Quote 0
                          • johnpozJ
                            johnpoz LAYER 8 Global Moderator @jimfreeze
                            last edited by

                            @jimfreeze dude that is not your pfsense hosts file..

                            Here

                            pfsensehosts.jpg

                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                            If you get confused: Listen to the Music Play
                            Please don't Chat/PM me for help, unless mod related
                            SG-4860 24.11 | Lab VMs 2.8, 24.11

                            1 Reply Last reply Reply Quote 0
                            • J
                              jimfreeze @johnpoz
                              last edited by

                              @johnpoz Hey, sorry about that. I saw your post and responded, but it didn't go through.

                              cat /etc/hosts
                              127.0.0.1	localhost localhost.home.arpa
                              ::1	localhost localhost.home.arpa
                              

                              BTW, I'm not sure how this setup has changed, but it NOW recognizes pfsense.home.arpa, without a host override.

                              johnpozJ 1 Reply Last reply Reply Quote 0
                              • johnpozJ
                                johnpoz LAYER 8 Global Moderator @jimfreeze
                                last edited by johnpoz

                                @jimfreeze said in How to setup a Host Override:

                                without a host override.

                                Because you shouldn't have to do that - since that is pfsense default name.

                                Now can your clients resolve pfsense.home.arpa? And can you access the webgui via that name.

                                But your failing to show your full hosts file - since your not showing pfsense.home.arpa in there and just the first 2 lines..

                                An intelligent man is sometimes forced to be drunk to spend time with his fools
                                If you get confused: Listen to the Music Play
                                Please don't Chat/PM me for help, unless mod related
                                SG-4860 24.11 | Lab VMs 2.8, 24.11

                                J 1 Reply Last reply Reply Quote 0
                                • J
                                  jimfreeze @johnpoz
                                  last edited by jimfreeze

                                  @johnpoz Yes, clients can ping pfsense.home.arpa and web access also works.

                                  That is the full /ect/hosts file.

                                  8) Shell
                                  
                                  Enter an option: 8
                                  
                                  [21.05.2-RELEASE][admin@pfSense.home.arpa]/root: cat /etc/hosts
                                  127.0.0.1	localhost localhost.home.arpa
                                  ::1	localhost localhost.home.arpa
                                  [21.05.2-RELEASE][admin@pfSense.home.arpa]/root:
                                  
                                  johnpozJ 1 Reply Last reply Reply Quote 0
                                  • johnpozJ
                                    johnpoz LAYER 8 Global Moderator @jimfreeze
                                    last edited by johnpoz

                                    @jimfreeze how exactly would you be resolving pfsense.home.arpa if its not in your hosts file?

                                    edit: ah look in here
                                    cat /var/unbound/host_entries.conf

                                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                                    If you get confused: Listen to the Music Play
                                    Please don't Chat/PM me for help, unless mod related
                                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                                    J 1 Reply Last reply Reply Quote 0
                                    • J
                                      jimfreeze @johnpoz
                                      last edited by

                                      @johnpoz Hmmm

                                      [21.05.2-RELEASE][admin@pfSense.home.arpa]/root: cat /var/unbound/host_entries.conf
                                      local-zone: "home.arpa." transparent
                                      local-data-ptr: "127.0.0.1 localhost.home.arpa"
                                      local-data: "localhost. A 127.0.0.1"
                                      local-data: "localhost.home.arpa. A 127.0.0.1"
                                      local-data-ptr: "::1 localhost.home.arpa"
                                      local-data: "localhost. AAAA ::1"
                                      local-data: "localhost.home.arpa. AAAA ::1"
                                      [21.05.2-RELEASE][admin@pfSense.home.arpa]/root:
                                      
                                      [21.05.2-RELEASE][admin@pfSense.home.arpa]/root: cat /etc/hosts
                                      127.0.0.1	localhost localhost.home.arpa
                                      ::1	localhost localhost.home.arpa
                                      [21.05.2-RELEASE][admin@pfSense.home.arpa]/root:
                                      

                                      However, when I opened my laptop up this time (no changes to pfsense), it is NOT resolving

                                      arm64:~ % ping pfsense.home.arpa
                                      ping: cannot resolve pfsense.home.arpa: Unknown host
                                      arm64:~ % ping home.arpa
                                      ping: cannot resolve home.arpa: Unknown host
                                      arm64:~ % ping localhost.home.arpa
                                      PING localhost.home.arpa (127.0.0.1): 56 data bytes
                                      64 bytes from 127.0.0.1: icmp_seq=0 ttl=64 time=0.077 ms
                                      64 bytes from 127.0.0.1: icmp_seq=1 ttl=64 time=0.097 ms
                                      ^C
                                      
                                      johnpozJ 1 Reply Last reply Reply Quote 0
                                      • johnpozJ
                                        johnpoz LAYER 8 Global Moderator @jimfreeze
                                        last edited by

                                        @jimfreeze Well no it can not and would not resolve if there is no entry there..

                                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                                        If you get confused: Listen to the Music Play
                                        Please don't Chat/PM me for help, unless mod related
                                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                                        J 1 Reply Last reply Reply Quote 0
                                        • J
                                          jimfreeze @johnpoz
                                          last edited by

                                          @johnpoz So, how do clients recognize the home.arpa domain without setting a host override?

                                          johnpozJ 1 Reply Last reply Reply Quote 0
                                          • johnpozJ
                                            johnpoz LAYER 8 Global Moderator @jimfreeze
                                            last edited by

                                            @jimfreeze Huh.. home.arpa is your domain that is being handed out via dhcp.. Why you have no entry for pfsense.home.arpa I have no idea what your actually doing..

                                            Your general setting that you posted before showed pfsense with home.arpa as the domain. This is a default.

                                            Did you change that?

                                            But if there is no entry for pfsense.home.arpa for unbound to know about, then no it can return an answer for that via a dns query.

                                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                                            If you get confused: Listen to the Music Play
                                            Please don't Chat/PM me for help, unless mod related
                                            SG-4860 24.11 | Lab VMs 2.8, 24.11

                                            J 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.