Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    pfsense 2.7.0-BETA

    Scheduled Pinned Locked Moved CE 2.7.0 Development Snapshots (Retired)
    27 Posts 5 Posters 3.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      stephenkwabena @stephenkwabena
      last edited by

      @stephenkwabena Yes Screenshot from 2023-06-19 01-00-47.png

      Screenshot from 2023-06-19 01-02-01.png

      johnpozJ 1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator @stephenkwabena
        last edited by johnpoz

        @stephenkwabena

        You go something wrong if 127.0.0.1 takes almost 1 second to resolve google.com, does it resolve faster if you do it again right away. What is this 10.10.16.1 IP?

        Do you have it setup to forward? Or is it resolving which is default.

        can we see its setup

        settinghs.jpg

        where are you clients pointing too.. what is IP address of pfsense on the lan.. on your client just do a nslookup

        $ nslookup
        Default Server:  sg4860.local.lan
        Address:  192.168.9.253
        
        >
        

        192.168.9.253 is my lan Ip of pfsense, and unbound is listening on my lan - see my above settings. If you client is pointing at your lan pfsense IP, and you don't get back pfsense name - like you see on mine sg4860.local.lan - what are the firewall rules on your lan interface?

        lanrules.jpg

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        S 2 Replies Last reply Reply Quote 0
        • S
          stephenkwabena @johnpoz
          last edited by

          @johnpoz 10.10.16.1 is my WAN or ISP router's IP

          1 Reply Last reply Reply Quote 0
          • S
            stephenkwabena @johnpoz
            last edited by

            @johnpoz said in pfsense 2.7.0-BETA:

            @stephenkwabena

            You go something wrong if 127.0.0.1 takes almost 1 second to resolve google.com, does it resolve faster if you do it again right away. What is this 10.10.16.1 IP?

            Do you have it setup to forward? Or is it resolving which is default.

            can we see its setup

            settinghs.jpg

            where are you clients pointing too.. what is IP address of pfsense on the lan.. on your client just do a nslookup

            $ nslookup
            Default Server:  sg4860.local.lan
            Address:  192.168.9.253
            
            >
            

            192.168.9.253 is my lan Ip of pfsense, and unbound is listening on my lan - see my above settings. If you client is pointing at your lan pfsense IP, and you don't get back pfsense name - like you see on mine sg4860.local.lan - what are the firewall rules on your lan interface?

            lanrules.jpg

            My firewall rules is same as yours in the picture. My clients points to pfsense. My pfsense IP is 192.168.1.1

            johnpozJ 1 Reply Last reply Reply Quote 0
            • johnpozJ
              johnpoz LAYER 8 Global Moderator @stephenkwabena
              last edited by

              @stephenkwabena and when you do a nslookup on your client what do you get?

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.8, 24.11

              S 2 Replies Last reply Reply Quote 0
              • S
                stephenkwabena @johnpoz
                last edited by

                This post is deleted!
                1 Reply Last reply Reply Quote 0
                • S
                  stephenkwabena @johnpoz
                  last edited by

                  @johnpoz This what I get pf1.PNG pf.PNG

                  johnpozJ 1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator @stephenkwabena
                    last edited by

                    @stephenkwabena

                    Ok so unbound is running and your clients are pointing at it.. And it resolves its own name via ptr query.

                    Where are you unbound settings. At a loss to why you are showing ping from the diagnostics?

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                    S 1 Reply Last reply Reply Quote 0
                    • jimpJ jimp moved this topic from Problems Installing or Upgrading pfSense Software on
                    • S
                      stephenkwabena @johnpoz
                      last edited by

                      @johnpoz said in pfsense 2.7.0-BETA:

                      Where are you unbound settings

                      Please, can show me where to find the settings?

                      johnpozJ 1 Reply Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator @stephenkwabena
                        last edited by

                        @stephenkwabena in the resolver

                        resolver.jpg

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        S 1 Reply Last reply Reply Quote 1
                        • S
                          stephenkwabena @johnpoz
                          last edited by

                          @johnpoz pf4.PNG pf3.PNG pf2.PNG

                          ? 1 Reply Last reply Reply Quote 0
                          • S
                            stephenkwabena
                            last edited by

                            @johnpoz Another issue. I have upgraded to pfsense 2.7.0-BETA, when I added a new interface for Guest's or hotspot, there is no internet on that LAN.
                            Below are my configuration
                            Lan.PNG

                            My firewall rule for the guest or hotspot lan
                            Lan1.PNG

                            My DHCP settings too
                            Lan2.PNG

                            1 Reply Last reply Reply Quote 0
                            • ?
                              A Former User @stephenkwabena
                              last edited by

                              @stephenkwabena

                              If not fixed and still relevant : have a look at the unbound service.

                              For a similar issue I had to enable "DNS Query Forwarding" where before the "DNS Query Forwarding" was not enable and never needed.

                              The pfsense box itself had a working DNS setup, but DHCP clients behind the pfsense box could not connect due to DNS not resolving addresses issues.

                              1 Reply Last reply Reply Quote 0
                              • stephenw10S
                                stephenw10 Netgate Administrator
                                last edited by

                                I see nothing here that indicates it's actually a DNS issue. It was just speculated that it might be a DNS problem.

                                How is it actually failing on clients behind pfSense?

                                S 1 Reply Last reply Reply Quote 0
                                • S
                                  stephenkwabena @stephenw10
                                  last edited by

                                  @stephenw10 said in pfsense 2.7.0-BETA:

                                  I see nothing here that indicates it's a DNS issue.

                                  Yes, I can access pfsense GUI using the domain name I resolved (https://firewall.mydomain.com) same LAN.

                                  1 Reply Last reply Reply Quote 0
                                  • stephenw10S
                                    stephenw10 Netgate Administrator
                                    last edited by

                                    OK so when you're testing from a client that cannot reach the internet how does it fail? What error do you see?

                                    S 1 Reply Last reply Reply Quote 0
                                    • S
                                      stephenkwabena @stephenw10
                                      last edited by

                                      @stephenw10 said in pfsense 2.7.0-BETA:

                                      What error do you see?

                                      The only thing I get with a client connected via cable and wireless is "connected, no internet" but I can access the pfsense GUI

                                      1 Reply Last reply Reply Quote 0
                                      • stephenw10S
                                        stephenw10 Netgate Administrator
                                        last edited by

                                        Ok, so if you try to ping google.com from that client how does it fail?

                                        S 1 Reply Last reply Reply Quote 0
                                        • S
                                          stephenkwabena @stephenw10
                                          last edited by stephenkwabena

                                          @stephenw10 said in pfsense 2.7.0-BETA:

                                          Ok, so if you try to ping google.com from that client how does it fail?

                                          Screenshot from 2023-06-24 21-06-19.png

                                          1 Reply Last reply Reply Quote 0
                                          • stephenw10S
                                            stephenw10 Netgate Administrator
                                            last edited by

                                            OK that indicates a DNS failure. 😉

                                            So check pfSense can resolve locally. Make sure the client is actually using pfSense for DNS.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.