Upgrade to 24.03 - DNS Settings

[Saqqara]

Upgraded a few devices, after the upgrade in dns servers i am seeing ::1

login-to-view

We are not running IP6 on the firewall,

Do anyone know how to remove this entry, or is it bug

[SwissSteph]

I have the same thing and I never set (23.09.1 and earlier) this parameter!?

Is it safe to remove it? ... and how?

login-to-view

login-to-view

[DaniloZ]

@SwissSteph that can be managed under System > General Setup - DNS Server Settings - DNS Resolution Behavior

If you choose the "Use remote DNS Servers, ignore local DNS" option, you won't see localhost addresses IPv4/IPv6 listed there anymore.
login-to-view

[SwissSteph]

@DaniloZ

Thank you for your reply.

what i don't understand is that i didn't change anything from my version 23.09.1 to version 24.03 and i have this ::1 that appeared.

What's more, I also didn't change anything in the option you indicate, and haven't done so for many versions, so I don't understand why I have to change this parameter. Is it something new in version 24.03?

Sorry for these questions "for this type of detail"...

[Gertjan]

@SwissSteph said in Upgrade to 24.03 - DNS Settings:

so I don't understand why I have to change this parameter

It's not a bug, it was a missing feature.
See here : pfSense Plus software version 24.03-RELEASE is here! where you can find the Release notes.

and there you have it :

Fixed: Local DNS resolution behavior does not add an IPv6 nameserver #15139

So it fixes so something. Does it break something else ?
Remember "::1" is not exposing any IPv6 on your networks. Its only accessible by processes running on pfSense itself.

[SwissSteph]

@Gertjan

Thank you for your message and your explanations

[Saqqara]

Thanks for the responses,

Now known this is normal and not a bug

[jimp]

For clarity since it wasn't spelled out explicitly above:

The ::1 entry for IPv6 is the same as 127.0.0.1 for IPv4. It's just the localhost loopback address but for IPv6 which allows the system to talk to itself over IPv6 locally as needed. It doesn't have any bearing on anything outside of the firewall itself.

[RJ]

@jimp

Thanks for confirming the nameserver ::1 entry in /etc/resolv.conf is there for IPv6. This has not caused any problems for me.

However, I think it causes DNS Lookups from within the pfsense GUI to briefly hang as it waits for a timeout from the query to ::1

[MoonKnight]

@RJ said in Upgrade to 24.03 - DNS Settings:

@jimp

Thanks for confirming the nameserver ::1 entry in /etc/resolv.conf is there for IPv6. This has not caused any problems for me.

However, I think it causes DNS Lookups from within the pfsense GUI to briefly hang as it waits for a timeout from the query to ::1

Look at this one:
https://forum.netgate.com/topic/189394/local-loopback-ipv6-dns-timeouts-no-response-24-03