Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    pfsense 2.7.0-BETA

    CE 2.7.0 Development Snapshots (Retired)
    5
    27
    2.6k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • johnpozJ
      johnpoz LAYER 8 Global Moderator @stephenkwabena
      last edited by johnpoz

      @stephenkwabena

      You go something wrong if 127.0.0.1 takes almost 1 second to resolve google.com, does it resolve faster if you do it again right away. What is this 10.10.16.1 IP?

      Do you have it setup to forward? Or is it resolving which is default.

      can we see its setup

      settinghs.jpg

      where are you clients pointing too.. what is IP address of pfsense on the lan.. on your client just do a nslookup

      $ nslookup
      Default Server:  sg4860.local.lan
      Address:  192.168.9.253
      
      >
      

      192.168.9.253 is my lan Ip of pfsense, and unbound is listening on my lan - see my above settings. If you client is pointing at your lan pfsense IP, and you don't get back pfsense name - like you see on mine sg4860.local.lan - what are the firewall rules on your lan interface?

      lanrules.jpg

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.7.2, 24.11

      S 2 Replies Last reply Reply Quote 0
      • S
        stephenkwabena @johnpoz
        last edited by

        @johnpoz 10.10.16.1 is my WAN or ISP router's IP

        1 Reply Last reply Reply Quote 0
        • S
          stephenkwabena @johnpoz
          last edited by

          @johnpoz said in pfsense 2.7.0-BETA:

          @stephenkwabena

          You go something wrong if 127.0.0.1 takes almost 1 second to resolve google.com, does it resolve faster if you do it again right away. What is this 10.10.16.1 IP?

          Do you have it setup to forward? Or is it resolving which is default.

          can we see its setup

          settinghs.jpg

          where are you clients pointing too.. what is IP address of pfsense on the lan.. on your client just do a nslookup

          $ nslookup
          Default Server:  sg4860.local.lan
          Address:  192.168.9.253
          
          >
          

          192.168.9.253 is my lan Ip of pfsense, and unbound is listening on my lan - see my above settings. If you client is pointing at your lan pfsense IP, and you don't get back pfsense name - like you see on mine sg4860.local.lan - what are the firewall rules on your lan interface?

          lanrules.jpg

          My firewall rules is same as yours in the picture. My clients points to pfsense. My pfsense IP is 192.168.1.1

          johnpozJ 1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator @stephenkwabena
            last edited by

            @stephenkwabena and when you do a nslookup on your client what do you get?

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.7.2, 24.11

            S 2 Replies Last reply Reply Quote 0
            • S
              stephenkwabena @johnpoz
              last edited by

              This post is deleted!
              1 Reply Last reply Reply Quote 0
              • S
                stephenkwabena @johnpoz
                last edited by

                @johnpoz This what I get pf1.PNG pf.PNG

                johnpozJ 1 Reply Last reply Reply Quote 0
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator @stephenkwabena
                  last edited by

                  @stephenkwabena

                  Ok so unbound is running and your clients are pointing at it.. And it resolves its own name via ptr query.

                  Where are you unbound settings. At a loss to why you are showing ping from the diagnostics?

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                  S 1 Reply Last reply Reply Quote 0
                  • jimpJ jimp moved this topic from Problems Installing or Upgrading pfSense Software on
                  • S
                    stephenkwabena @johnpoz
                    last edited by

                    @johnpoz said in pfsense 2.7.0-BETA:

                    Where are you unbound settings

                    Please, can show me where to find the settings?

                    johnpozJ 1 Reply Last reply Reply Quote 0
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator @stephenkwabena
                      last edited by

                      @stephenkwabena in the resolver

                      resolver.jpg

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                      S 1 Reply Last reply Reply Quote 1
                      • S
                        stephenkwabena @johnpoz
                        last edited by

                        @johnpoz pf4.PNG pf3.PNG pf2.PNG

                        ? 1 Reply Last reply Reply Quote 0
                        • S
                          stephenkwabena
                          last edited by

                          @johnpoz Another issue. I have upgraded to pfsense 2.7.0-BETA, when I added a new interface for Guest's or hotspot, there is no internet on that LAN.
                          Below are my configuration
                          Lan.PNG

                          My firewall rule for the guest or hotspot lan
                          Lan1.PNG

                          My DHCP settings too
                          Lan2.PNG

                          1 Reply Last reply Reply Quote 0
                          • ?
                            A Former User @stephenkwabena
                            last edited by

                            @stephenkwabena

                            If not fixed and still relevant : have a look at the unbound service.

                            For a similar issue I had to enable "DNS Query Forwarding" where before the "DNS Query Forwarding" was not enable and never needed.

                            The pfsense box itself had a working DNS setup, but DHCP clients behind the pfsense box could not connect due to DNS not resolving addresses issues.

                            1 Reply Last reply Reply Quote 0
                            • stephenw10S
                              stephenw10 Netgate Administrator
                              last edited by

                              I see nothing here that indicates it's actually a DNS issue. It was just speculated that it might be a DNS problem.

                              How is it actually failing on clients behind pfSense?

                              S 1 Reply Last reply Reply Quote 0
                              • S
                                stephenkwabena @stephenw10
                                last edited by

                                @stephenw10 said in pfsense 2.7.0-BETA:

                                I see nothing here that indicates it's a DNS issue.

                                Yes, I can access pfsense GUI using the domain name I resolved (https://firewall.mydomain.com) same LAN.

                                1 Reply Last reply Reply Quote 0
                                • stephenw10S
                                  stephenw10 Netgate Administrator
                                  last edited by

                                  OK so when you're testing from a client that cannot reach the internet how does it fail? What error do you see?

                                  S 1 Reply Last reply Reply Quote 0
                                  • S
                                    stephenkwabena @stephenw10
                                    last edited by

                                    @stephenw10 said in pfsense 2.7.0-BETA:

                                    What error do you see?

                                    The only thing I get with a client connected via cable and wireless is "connected, no internet" but I can access the pfsense GUI

                                    1 Reply Last reply Reply Quote 0
                                    • stephenw10S
                                      stephenw10 Netgate Administrator
                                      last edited by

                                      Ok, so if you try to ping google.com from that client how does it fail?

                                      S 1 Reply Last reply Reply Quote 0
                                      • S
                                        stephenkwabena @stephenw10
                                        last edited by stephenkwabena

                                        @stephenw10 said in pfsense 2.7.0-BETA:

                                        Ok, so if you try to ping google.com from that client how does it fail?

                                        Screenshot from 2023-06-24 21-06-19.png

                                        1 Reply Last reply Reply Quote 0
                                        • stephenw10S
                                          stephenw10 Netgate Administrator
                                          last edited by

                                          OK that indicates a DNS failure. 😉

                                          So check pfSense can resolve locally. Make sure the client is actually using pfSense for DNS.

                                          1 Reply Last reply Reply Quote 0
                                          • stephenw10S
                                            stephenw10 Netgate Administrator
                                            last edited by stephenw10

                                            There are two threads for this with people contributing in each.

                                            Lets's continue in the other thread: https://forum.netgate.com/topic/180907/pfsense-2-7-0-beta

                                            1 Reply Last reply Reply Quote 0
                                            • stephenw10S stephenw10 referenced this topic on
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.