IPSEC Mobile Clients on MacOS/iOS are unable to resolve DNS after updating from 22.02 TO 22.05

mringl

Hello,
We use Split-DNS configuration for Mobile IPSec clients on our Firewall.
After updating the firewall to 22.05 all MacOS /iOS Clients never ask the VPN configured DNS Server.
I'm able to ping but nslookup or dig doesn't work without specifying an internal DNS Server (Active Directory DNS Servers).

I've tried the VPN Profile Provided by the PFsense Ipsec Export: Apple Profile package, but I also created one by my own.

As mentioned: Everything worked before updating to 22.05.

CR Markus

mringl

I also found out that in /etc/inc/ipsec.inc the search domain attribute property key was changed from 28674 to 27674.

In this commit:
https://github.com/pfsense/pfsense/commit/3a0f6f3609dcb50e3ba927a743fb9f1990a48181

new

	if (!empty($a_client['dns_domain'])) {
		$ssconf['charon']['plugins']['attr'][] = "# Search domain and default domain";
		$ssconf['charon']['plugins']['attr']['27674'] = "\"{$a_client['dns_domain']}\"";
		if (empty($a_client['dns_split'])) {
			$ssconf['charon']['plugins']['attr']['27675'] = "\"{$a_client['dns_domain']}\"";
		}
	}

old

if (!empty($a_client['dns_domain'])) {
	$pool_common[] = "# Search domain and default domain";
	$pool_common['28674'] = "\"{$a_client['dns_domain']}\"";
	if (empty($a_client['dns_split'])) {
		$pool_common['28675'] = "\"{$a_client['dns_domain']}\"";
	}
}

I think this is also wrong, i've tried to change it but without any effect.