Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    No internet access

    Scheduled Pinned Locked Moved General pfSense Questions
    22 Posts 3 Posters 2.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • R
      ralf.lionel
      last edited by

      jk.png

      Yes, unbound is running

      1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        Then either it's unable to resolve or the client is not using it.

        Check Diag > DNS Lookup. Make sure all configured DNS servers respond to queries.

        1 Reply Last reply Reply Quote 0
        • R
          ralf.lionel
          last edited by

          Capture d’écran 2022-08-03 201446.png

          Here is the result !

          Ralf

          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            Ok, Unbound isn't responding there. It should be on localhost.

            Try resaving it in Services > DNS Resolver and test again.

            1 Reply Last reply Reply Quote 0
            • R
              ralf.lionel
              last edited by

              google.png google 2.png

              is it correct ?

              johnpozJ 1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator @ralf.lionel
                last edited by

                @ralf-lionel no that is not correct.

                Your saying for the "domain" www.google.com go ask 172.217.170.100, so if you wanted to look up say host.www.domain.com go ask that IP..

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                1 Reply Last reply Reply Quote 0
                • R
                  ralf.lionel
                  last edited by ralf.lionel

                  @johnpoz then I have to put my WAN address? Thank you for your comeback.

                  johnpozJ 1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator @ralf.lionel
                    last edited by

                    @ralf-lionel NO you don't have to put anything in domain overrides.

                    Out of the box unbound resolves, and listens for queries on your pfsense Ips, one being loopback.

                    So when your clients ask say your lan IP 192.168.1.1, it goes and resolves what your asking for.

                    Pfsense just ask unbound on 127.0.0.1, the own internal address..

                    When you show 127.0.0.1 is not answering - points to unbound not even running.. Or it having a problem resolving, or forwarding if you had set that up..

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                    1 Reply Last reply Reply Quote 0
                    • stephenw10S
                      stephenw10 Netgate Administrator
                      last edited by

                      Yes, sorry, I meant just resave the Unbound settings without changing anything.

                      You shouldn't have any overrides set there.

                      Steve

                      1 Reply Last reply Reply Quote 0
                      • R
                        ralf.lionel
                        last edited by ralf.lionel

                        ef.png

                        Here's what I'm trying to do with pfsense and OpenVPN. I created two Win7 VMs with different internal networks and 2 others for the 2 pfsenses. So we have:

                        Pfsense server: adapter 1 -> bridge access
                        adapt 2->internal network (server)
                        connected to Win7_ 1: internal network (server)

                        and the second

                        pfsense client:
                        adapt 1 -> bridge access.
                        adapt 2->internal network (client)
                        connected to Win7_ 2: internal network (client)... All under virtualbox.

                        I followed this tutorial https://youtu.be/-8xt7LUtYH4 and
                        I had finished the configurations on each machine and tried to ping Win7_1 in Win7_2 but it failed and I thought it was due to the internet connection where I could not access from my browser. What do you think ? (I am still an apprentice in the field of the network). Thanks again for your feedback.

                        Ralf

                        1 Reply Last reply Reply Quote 0
                        • stephenw10S
                          stephenw10 Netgate Administrator
                          last edited by

                          @ralf-lionel said in No internet access:

                          https://youtu.be/-8xt7LUtYH4

                          That's a good tutorial. It will work if the sites/VMs are working correctly first. Which they are not, yet. 😉

                          I assume you are using a different Internal Network for each pfSense VM in VBox?

                          The two Win7 clients should be able to reach the internet.

                          DNS is failing for the client you are testing and it looks to be because Unbound is not responding to queries. One thing that could cause that is if you have added a default route to the firewall via the OpenVPN tunnel so all Unbound's queries are being sent that way.
                          However that seems unlikely since the client behind it is able to ping external sites by IP directly.
                          I would still recommend disabling any OpenVPN setup you have added until both sites are behaving as expected. Then add it one step at a time.

                          Steve

                          1 Reply Last reply Reply Quote 1
                          • R
                            ralf.lionel
                            last edited by

                            Thank you all, it's solved !

                            1 Reply Last reply Reply Quote 1
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.