Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Register DHCP WAN address with unbound?

    Scheduled Pinned Locked Moved General pfSense Questions
    18 Posts 5 Posters 1.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • johnpozJ
      johnpoz LAYER 8 Global Moderator @dennypage
      last edited by johnpoz

      @dennypage said in Register DHCP WAN address with unbound?:

      when a local host does a DNS lookup for "vpn.mydomain.net", Unbound will return not found.

      That is not the default behavior - the default zone type is transparent, so if your using the same domain locally as public.. ie mydomain.net and there is no vpn.mydomain.net unbound would look it up via public.

      If you had change the zone to static vs transparent then yeah it wouldn't look up anything that wasn't local for mydomain.net. But out of the box the zone type is transparent.

      edit:
      https://docs.netgate.com/pfsense/en/latest/services/dns/resolver-config.html

      zonetype.jpg

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.8, 24.11

      dennypageD 1 Reply Last reply Reply Quote 0
      • dennypageD
        dennypage @johnpoz
        last edited by

        @johnpoz said in Register DHCP WAN address with unbound?:

        That is not the default behavior - the default zone type is transparent, so if your using the same domain locally as public.. ie mydomain.net and there is no vpn.mydomain.net unbound would look it up via public.

        If you had change the zone to static vs transparent then yeah it wouldn't look up anything that wasn't local for mydomain.net. But out of the box the zone type is transparent.

        Thanks John. Yes, I changed it a couple of years ago as part of a shift from using another local host as a DNS master. Now I'll have to go back and research why it was necessary...

        johnpozJ 1 Reply Last reply Reply Quote 0
        • johnpozJ
          johnpoz LAYER 8 Global Moderator @dennypage
          last edited by

          @dennypage I have mine set to static - just for being a good netizen. I use local domain so there would be zero reason to try and resolve either local.lan or home.arpa from the public dns.

          So if I typo something, or try and get to something in my local dns that does not have a record there would be zero reason to try and normally resolve it via public.

          I never been a fan of using the same domain both public and local, can lead to all kinds bad stuff. If going to use same parent domain.net you should prob use say say sub locally like local.domain.net, or domain.net locally and like domain.org public..

          But yeah transparent should resolve your current issue.. can resolve all your local resources, and when trying to resolve vpn.yourdomain.net it would return your public IP via normal dns resolution your using either resolving for forwarding.

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.8, 24.11

          Bob.DigB 1 Reply Last reply Reply Quote 0
          • NollipfSenseN
            NollipfSense @dennypage
            last edited by

            @dennypage said in Register DHCP WAN address with unbound?:

            The 100 or so internal DNS names, such as "host1.mydomain.net" are assigned via DHCP, and resolved locally via Unbound. As a result, Unbound considers itself authoritative or "mydomain.net". So when a local host does a DNS lookup for "vpn.mydomain.net", Unbound will return not found.

            Set host override here should work, that's if pfSense is doing DNS...

            pfSense+ 23.09 Lenovo Thinkcentre M93P SFF Quadcore i7 dual Raid-ZFS 128GB-SSD 32GB-RAM PCI-Intel i350-t4 NIC, -Intel QAT 8950.
            pfSense+ 23.09 VM-Proxmox, Dell Precision Xeon-W2155 Nvme 500GB-ZFS 128GB-RAM PCIe-Intel i350-t4, Intel QAT-8950, P-cloud.

            dennypageD 1 Reply Last reply Reply Quote 0
            • dennypageD
              dennypage @NollipfSense
              last edited by

              @NollipfSense said in Register DHCP WAN address with unbound?:

              The 100 or so internal DNS names, such as "host1.mydomain.net" are assigned via DHCP, and resolved locally via Unbound. As a result, Unbound considers itself authoritative or "mydomain.net". So when a local host does a DNS lookup for "vpn.mydomain.net", Unbound will return not found.
              Set host override here should work, that's if pfSense is doing DNS...

              ? More words please...

              NollipfSenseN 1 Reply Last reply Reply Quote 0
              • NollipfSenseN
                NollipfSense @dennypage
                last edited by NollipfSense

                @dennypage said in Register DHCP WAN address with unbound?:

                @NollipfSense said in Register DHCP WAN address with unbound?:

                The 100 or so internal DNS names, such as "host1.mydomain.net" are assigned via DHCP, and resolved locally via Unbound. As a result, Unbound considers itself authoritative or "mydomain.net". So when a local host does a DNS lookup for "vpn.mydomain.net", Unbound will return not found.
                Set host override here should work, that's if pfSense is doing DNS...

                ? More words please...

                Services > DNS Resolver > General Settings: scroll to the bottom of page...your DNS must be set to:
                Screenshot 2023-08-17 at 7.46.59 PM.png

                Screenshot 2023-08-17 at 7.25.54 PM.png

                Configure your "mydomain.net" or vpn.mydomain.net with the IP and pfSense will resolve it.
                Screenshot 2023-08-17 at 7.29.35 PM.png

                pfSense+ 23.09 Lenovo Thinkcentre M93P SFF Quadcore i7 dual Raid-ZFS 128GB-SSD 32GB-RAM PCI-Intel i350-t4 NIC, -Intel QAT 8950.
                pfSense+ 23.09 VM-Proxmox, Dell Precision Xeon-W2155 Nvme 500GB-ZFS 128GB-RAM PCIe-Intel i350-t4, Intel QAT-8950, P-cloud.

                johnpozJ 1 Reply Last reply Reply Quote 0
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator @NollipfSense
                  last edited by johnpoz

                  @NollipfSense said in Register DHCP WAN address with unbound?:

                  Configure your "mydomain.net" or vpn.mydomain.net with the IP and pfSense will resolve it.

                  That would be easy solution if was static - but as stated in the first post, he is moving to a dynamic IP. So if it does happen to change and they have a host override set for it - it would be resolving the wrong IP.

                  Now maybe the dynamic doesn't change - I have had the same dynamic IP for years at a time.. But even when its like that, you never know when it could change. Last time mine changed it was because the isp merged and their was a whole restructuring of the IP space - that doesn't happen often most likely. But when your on a dynamic IP you have no control over when it "could" change.

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                  NollipfSenseN 1 Reply Last reply Reply Quote 1
                  • NollipfSenseN
                    NollipfSense @johnpoz
                    last edited by

                    @johnpoz said in Register DHCP WAN address with unbound?:

                    he is moving to a dynamic IP

                    Forgot that part...

                    pfSense+ 23.09 Lenovo Thinkcentre M93P SFF Quadcore i7 dual Raid-ZFS 128GB-SSD 32GB-RAM PCI-Intel i350-t4 NIC, -Intel QAT 8950.
                    pfSense+ 23.09 VM-Proxmox, Dell Precision Xeon-W2155 Nvme 500GB-ZFS 128GB-RAM PCIe-Intel i350-t4, Intel QAT-8950, P-cloud.

                    1 Reply Last reply Reply Quote 0
                    • GertjanG
                      Gertjan @dennypage
                      last edited by

                      @dennypage said in Register DHCP WAN address with unbound?:

                      Does anyone know of a way to register the current DHCP WAN address with unbound? Similar to the way that you would use a dynamic DNS service, except for the local unbound server.

                      I'm not sure if my IPv4 WAN is really dynamic, as it never changes.
                      I've a Dyndns running, just in case.

                      e2dab2fe-763e-476f-b838-c0216fd59db8-image.png

                      So, on a LAN device :

                      Microsoft Windows [version 10.0.22621.2134]
                      (c) Microsoft Corporation. Tous droits réservés.

                      C:\Users\Gauche>nslookup home.brit-hotel-fumel.fr
                      Serveur :   pfSense.brit-hotel-fumel.net
                      Address:  2a01:cb19:907:a6dc:92ec:77ff:fe29:392c
                      
                      Réponse ne faisant pas autorité :
                      Nom :    home.brit-hotel-fumel.fr
                      Address:  82.127.26.108
                      

                      "Register in unbound" means locking a host name on an IP, right ?
                      Where ever I need my WAN IP (I guess, I don't) I use this host name.

                      Btw : 188.165.53.87 is the zone master of all my publicly accessible host names (domain names).

                      I 'own' this domain dot net name, and use it only locally, for my LAN/pfSense needs :

                      74cc7b9d-2d69-4663-bbb1-16524c1c7b97-image.png

                      No "help me" PM's please. Use the forum, the community will thank you.
                      Edit : and where are the logs ??

                      NollipfSenseN 1 Reply Last reply Reply Quote 0
                      • NollipfSenseN
                        NollipfSense @Gertjan
                        last edited by

                        @Gertjan said in Register DHCP WAN address with unbound?:

                        the zone master of all my publicly accessible host names (domain names).

                        I 'own' this domain dot net name,

                        I found it best also to have a real domain (often a $10/yr cost) and Cloudflare DNS but resolve locally.

                        pfSense+ 23.09 Lenovo Thinkcentre M93P SFF Quadcore i7 dual Raid-ZFS 128GB-SSD 32GB-RAM PCI-Intel i350-t4 NIC, -Intel QAT 8950.
                        pfSense+ 23.09 VM-Proxmox, Dell Precision Xeon-W2155 Nvme 500GB-ZFS 128GB-RAM PCIe-Intel i350-t4, Intel QAT-8950, P-cloud.

                        GertjanG 1 Reply Last reply Reply Quote 0
                        • Bob.DigB
                          Bob.Dig LAYER 8 @johnpoz
                          last edited by Bob.Dig

                          @johnpoz said in Register DHCP WAN address with unbound?:

                          I never been a fan of using the same domain both public and local, can lead to all kinds bad stuff. If going to use same parent domain.net you should prob use say say sub locally like local.domain.net, or domain.net locally and like domain.org public..

                          Interesting. Just the other day I saw in an email header of mine that it would use home.arpa in it and I thought this is not looking "professional", so I changed some hosts to my external domain. 😉

                          1 Reply Last reply Reply Quote 0
                          • GertjanG
                            Gertjan @NollipfSense
                            last edited by

                            @NollipfSense said in Register DHCP WAN address with unbound?:

                            I found it best also to have a real domain (often a $10/yr cost)

                            Exact.
                            And it comes with a free bonus : free certificates.

                            No "help me" PM's please. Use the forum, the community will thank you.
                            Edit : and where are the logs ??

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.