Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Vlans will not DNS resolve

    Scheduled Pinned Locked Moved DHCP and DNS
    15 Posts 3 Posters 642 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      sentein
      last edited by

      @johnpoz sorry for the delay. the wife wanted to go out to eat. Thank you for the help with this. I ran the test you mentioned. When specifying the server the nslookup actually worked.

      de22ae20-4c64-459e-a847-873d78f82d25-image.png

      I am figuring this means my actual problem is in the server itself. Please correct me if i am incorrect. If thats the case i guess i need to go root around in the setting for the server.

      johnpozJ 1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator @sentein
        last edited by johnpoz

        @sentein so yeah linux will point to itself like that, and then forward elsewhere - but where it actually forwards to you have no idea where, which isn't working what flavor of linux are you running? prob using netplan would be my guess. Not really a fan..

        For example this version of ubuntu is doing it.

        user@UC:~$ nslookup
        > www.google.com
        Server:         127.0.0.53
        Address:        127.0.0.53#53
        
        Non-authoritative answer:
        Name:   www.google.com
        Address: 172.217.0.164
        >
        

        prob want to make sure its listening on 53..

        user@UC:~$ netstat -anl | grep :53
        tcp        0      0 127.0.0.53:53           0.0.0.0:*               LISTEN     
        udp        0      0 127.0.0.53:53           0.0.0.0:*                       
        

        And you can see where its pointing

        user@UC:~$ resolvectl status
        Global
               Protocols: -LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported
        resolv.conf mode: stub
        
        Link 2 (ens3)
            Current Scopes: DNS
                 Protocols: +DefaultRoute +LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported
        Current DNS Server: 192.168.3.10
               DNS Servers: 192.168.3.10
                DNS Domain: home.arpa
        user@UC:~$ 
        

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        1 Reply Last reply Reply Quote 0
        • S
          sentein
          last edited by

          @johnpoz Right now this server is running linux mint 21.3 edge. I tried ubuntu headless but i could not wrap my head around netplan. ubuntu wanted to route everything through the 10Gbe because it was faster. That was not working because the 10Gbe interface was and still is completely isolated. I did try to figure out what is going on with the DNS on the server. Below is the command and the output. It seems that my DNS settings are being forwaded to the server. I am a bit lost as to what it is doing. If you are sure that my problem is in the OS i can go bother someone else. At that point it is not a pfsense problem.

          nmcli dev show |grep DNS
          IP4.DNS[1]: 0.0.0.0
          IP4.DNS[2]: 9.9.9.9
          IP4.DNS[3]: 149.112.112.112
          IP4.DNS[4]: 84.200.70.40
          IP4.DNS[5]: 84.200.69.80

          1 Reply Last reply Reply Quote 0
          • S
            sentein
            last edited by

            The ---> DNS Domain: #####.net below is me sanitizing my address.

            Global
            Protocols: -LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported
            resolv.conf mode: stub
            Current DNS Server: 10.10.5.4
            DNS Servers: 10.10.5.4
            Fallback DNS Servers: 9.9.9.9

            Link 2 (ens1f0)
            Current Scopes: none
            Protocols: +DefaultRoute +LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported
            DNS Domain: #####.net

            Link 3 (ens1f1)
            Current Scopes: none
            Protocols: -DefaultRoute +LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported

            Link 4 (ens5)
            Current Scopes: none
            Protocols: -DefaultRoute +LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported

            Link 5 (ens5d1)
            Current Scopes: none
            Protocols: -DefaultRoute +LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported

            Link 6 (docker0)
            Current Scopes: none
            Protocols: -DefaultRoute +LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported

            Link 28 (veth118db9f)
            Current Scopes: none
            Protocols: -DefaultRoute +LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported

            Link 30 (veth2dd1412)
            Current Scopes: none
            Protocols: -DefaultRoute +LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported

            johnpozJ 1 Reply Last reply Reply Quote 0
            • johnpozJ
              johnpoz LAYER 8 Global Moderator @sentein
              last edited by

              @sentein said in Vlans will not DNS resolve:

              DNS Servers: 10.10.5.4

              And what IP is that, you should be pointing to pfsense lan IP..

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.8, 24.11

              S 1 Reply Last reply Reply Quote 0
              • S
                sentein @johnpoz
                last edited by

                @johnpoz that is the DHCP server for the vlan in question. 10.10.4.4 is the LAN DHCP server. So i should requires it to point to the LAN PFsense IP? Maybe thats most of my issue.

                johnpozJ 1 Reply Last reply Reply Quote 0
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator @sentein
                  last edited by

                  @sentein does this dhcp server provide dns?

                  Doesn't seem to - do a directed query to it..

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                  S 2 Replies Last reply Reply Quote 0
                  • S
                    sentein @johnpoz
                    last edited by

                    @johnpoz I thought it was supposed to. Maybe i have something wrong.... I have a second PC for the PFsense box. Should i just start over?

                    c77d3976-bccc-4450-96b4-94e6ea6f415a-image.png

                    1 Reply Last reply Reply Quote 0
                    • S
                      sentein @johnpoz
                      last edited by

                      @johnpoz No freaking idea what i did but now everything is working....

                      johnpozJ 1 Reply Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator @sentein
                        last edited by

                        @sentein Huh? So you have dhcp running on pfsense.. Thought you said you had a different dhcp server?

                        Also Unless you put unbound into forwarding mode, setting those dns servers is pointless..

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.