DNS Forwarder & Host overrides not working

CatSpecial202

Hello, my host overrides is not resolving correctly and I can't figure out what is incorrect. This is configured in my DNS Forwader. However, it looks like one of my names is being resolved correctly as seen in the picture below but it still results in a timed out connection.

This one is setup to resolve to 10.10.10.10 but it isn't being provided although everything appears correctly configured.

[24.11-RELEASE][username@<domainname>]/home/username: dig @127.0.0.1 lab.eveng.arpa

; <<>> DiG 9.20.2 <<>> @127.0.0.1 lab.eveng.arpa
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 26266
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;lab.eveng.arpa.                        IN      A

;; AUTHORITY SECTION:
arpa.                   86213   IN      SOA     a.root-servers.net. nstld.verisign-grs.com. 2024122800 1800 900 604800 86400

;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1) (UDP)
;; WHEN: Sat Dec 28 11:27:20 EST 2024
;; MSG SIZE  rcvd: 123

[24.11-RELEASE][username@<domainname>]/home/maxb:

Screenshot 2024-12-28 113548.png

johnpoz

@CatSpecial202 said in DNS Forwarder & Host overrides not working:

can't figure out what is incorrect.

You query for lab.eveng.arpa, but your host override is for eve-ng.lab.eveng.arpa for one thing.

btw - evenga.arpa not a good choice, home.arpa is the approved local domain. if you want to use evenga in there maybe use the new tld for local network .internal so evenga.internal would be a better domain or lab.eveng.internal

if you want lab.eveng.arpa to resolve than host override would be lab as host and eveng.arpa as domain.

CatSpecial202

@johnpoz Thank you for your help. I'm really still learning and overall confused about correct DNS configuration.

So, I changed it as you recommended and I can now connect to my eveng server through my domain name. I tried to do the same thing with my firewall but it doesn't work.

What is the difference between host in host overrides in the DNS forwarder and host in hostname in the dhcp lease, and should these be matching?

It looks like i'm being given the correct ip.

Screenshot 2024-12-28 120552.png

just to be clear the connection is timing out for the lab.firewall.internal

CatSpecial202

@johnpoz I got it to work it was using http not https.

Thanks for your help! If you could help me understand this I would appreciate it.

What is the difference between host in host overrides in the DNS forwarder and host in hostname in the dhcp lease, and should these be matching?

johnpoz

@CatSpecial202 did you change the domain in pfsense?

As to https - are you generating your own certs with CA? Pfsense normally doesn't like being accessed by some other fqdn, unless you list it as an alias

Which reminds me I can clear those out now - that was from when I was switching over from old local.lan to home.arpa

CatSpecial202

@johnpoz Yes, I changed it. thank you for the tips. I ended up spending the rest of the day messing around with cloudflares zero trust platform with their DNS blocking/filtering features now that I finally control the DNS on my network.