Moved pfSense to new hardware
-
Yeah seems as though switch manufacturers present those settings in different ways just catch you out.
-
@stephenw10 I have one more question, I am unable to view my websites on my server locally again. I had the issue when I first started using pfsense. I have split-dns setup and NAT reflection but it is still not working. I have VLAN's but that should not make a difference as I had it working on my previous hardware with the same config? Any idea's?
-
If you have split DNS and it's working correctly, the hosts resolve as internal IPs, then you should only need firewall rules to allow it.
The server could potentially refuse access from that source.
The server may attempt to use some other route if it's multihomed in both subnets.
How does it fail? What errors do you see? Do you see blocked traffic in the firewall log?
-
@stephenw10 In the browser all I get is ERR_NAME_NOT_RESOLVED I can't see any blocks in the firewall logs etc
-
Screenshot 1
Screenshot 2
-
Can you re-upload those screenshots. There was an issue with pictures on the forum that is now fixed.
What happens if you just try to resolve the host from the command line on the test device? What error do you see?
-
screenshot 1
Screenshot 2
The other weird thing is the control panel for the server works locally & remotely and I can access that. But I cannot access the other three domains which is bizarre!
-
@stephenw10 I just did a nslookup for my laptop and got the following
Server: 127.0.0.53
Address: 127.0.0.53#53** server can't find mydomain.com: SERVFAIL
-
Ok, seems like it's not using Unbound in pfSense for DNS then. Do thet resolve to the internal addresses from Diag > DNS Lookup?
Though if it's using some external DNS server I'd expect it to resolve to the pfSense public IP.
-
@stephenw10 Ok, no idea what is going on but it is all working now. It could have been the DNS Propagation even though I changed everything over on Thursday night! Thank you once again for your help.
