Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Cname/alias for external domain

    Scheduled Pinned Locked Moved DHCP and DNS
    34 Posts 8 Posters 21.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      doktornotor Banned
      last edited by

      I cannot see how's a program expecting oldhostname.domaina.com going to respond to requests to newhostname.domainb.com.

      1 Reply Last reply Reply Quote 0
      • ?
        A Former User
        last edited by

        @doktornotor:

        I cannot see how's a program expecting oldhostname.domaina.com going to respond to requests to newhostname.domainb.com.

        the program wont.  when it looks to pfsense to connect out via the internet, pfsense will redirect it.  basically, i'd like to enter a cname into pfsense.

        1 Reply Last reply Reply Quote 0
        • D
          doktornotor Banned
          last edited by

          I have no idea what "program" are we talking about here. If you expect that pfsense DNS record will rewrite e.g. www.google.com to www.bing.com in your browser URL bar, then it's not what's gonna happen.

          1 Reply Last reply Reply Quote 0
          • ?
            A Former User
            last edited by

            @doktornotor:

            I have no idea what "program" are we talking about here. If you expect that pfsense DNS record will rewrite e.g. www.google.com to www.bing.com in your browser URL bar, then it's not what's gonna happen.

            on the client side (the program) it will use the original domain old.domaina.com

            it is a cname, have you ever worked with cnames?  that is what i am looking to do.

            1 Reply Last reply Reply Quote 0
            • D
              doktornotor Banned
              last edited by

              Your CNAME will not work if the program somehow works with the requested hostname. Once again, see example above… It won't work either if we are talking about some IP camera with a webserver.

              1 Reply Last reply Reply Quote 0
              • ?
                A Former User
                last edited by

                @doktornotor:

                Your CNAME will not work if the program somehow works with the requested hostname. Once again, see example above…

                it works all the time in the scenarios where i am hosting my own domain and i can create a cname.  it doesn't seem that i can do that in pfsense.

                1 Reply Last reply Reply Quote 0
                • D
                  doktornotor Banned
                  last edited by

                  Well, that's awesome. How about reinstalling the broken thing instead of inventing similar nonsense like hijacking nonexistant hostname with a DNS forwarder?

                  1 Reply Last reply Reply Quote 0
                  • ?
                    A Former User
                    last edited by

                    @doktornotor:

                    Well, that's awesome. How about reinstalling the broken thing instead of inventing similar nonsense like hijacking nonexistant hostname with a DNS forwarder?

                    happens all the time with cnames, i guess it just isnt part of pfsense.

                    1 Reply Last reply Reply Quote 0
                    • D
                      doktornotor Banned
                      last edited by

                      Fail to see why it should do any such thing in the first place. It's a DNS forwarder.

                      1 Reply Last reply Reply Quote 0
                      • ?
                        A Former User
                        last edited by

                        @doktornotor:

                        Fail to see why it should do any such thing in the first place. It's a DNS forwarder.

                        i wasn't referencing that section, specifically, just if pfsense could do it.

                        1 Reply Last reply Reply Quote 0
                        • D
                          doktornotor Banned
                          last edited by

                          Sure; install tinydns or bind, or another authoritative DNS server. Neither dnsmasq, nor unbound. Or finally stop wasting the time and invest 5 minutes into reinstalling whatever broken thing you have there, instead of discussing for two days how to work around it.

                          1 Reply Last reply Reply Quote 0
                          • ?
                            A Former User
                            last edited by

                            @doktornotor:

                            Sure; install tinydns or bind, or another authoritative DNS server. Neither dnsmasq, nor unbound. Or finally stop wasting the time and invest 5 minutes into reinstalling whatever broken thing you have there, instead of discussing for two days how to work around it.

                            get the stick out of your ass.

                            if you don't want to help, that's fine with me.

                            i could have posted the question and gotten a reply 10 minutes later.  there goes your two day comment.

                            also, had pfsense had this feature and someone posted about it, it would have answered my question and i could have used it for something else in the future.

                            1 Reply Last reply Reply Quote 0
                            • D
                              doktornotor Banned
                              last edited by

                              @tomdlgns:

                              get the stick out of your ass.

                              Thanks for your kind "recommendation". Just found the ignore list feature, sanity restored.  ::)

                              1 Reply Last reply Reply Quote 0
                              • jimpJ
                                jimp Rebel Alliance Developer Netgate
                                last edited by

                                It's actually a valid question/use case. Ugly, sure. Not ideal? Certainly. But there are always devices you cannot control. Black boxes from vendors that won't update or would charge exorbitant fees to do so.

                                Unfortunately the way that CNAME records work in dnsmasq, the target of the CNAME must also be locally known. So you can CNAME something in /etc/hosts, but not something that would involve making a query to another remote DNS server. It's a limitation of dnsmasq, not DNS in general.

                                There is a more in-depth answer here:
                                http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2006q1/000583.html

                                But ultimately, to do that you'll need a much fancier DNS system.

                                If you happen to have a domain with Namecheap, their hosted DNS that you can manage in their control panel does support this function.

                                Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                                Need help fast? Netgate Global Support!

                                Do not Chat/PM for help!

                                1 Reply Last reply Reply Quote 0
                                • ?
                                  A Former User
                                  last edited by

                                  @jimp:

                                  It's actually a valid question/use case. Ugly, sure. Not ideal? Certainly. But there are always devices you cannot control. Black boxes from vendors that won't update or would charge exorbitant fees to do so.

                                  Unfortunately the way that CNAME records work in dnsmasq, the target of the CNAME must also be locally known. So you can CNAME something in /etc/hosts, but not something that would involve making a query to another remote DNS server. It's a limitation of dnsmasq, not DNS in general.

                                  There is a more in-depth answer here:
                                  http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2006q1/000583.html

                                  But ultimately, to do that you'll need a much fancier DNS system.

                                  If you happen to have a domain with Namecheap, their hosted DNS that you can manage in their control panel does support this function.

                                  thank you, this is helpful, in that, it is a better response as to why it won't work.

                                  the current domain/old domain i started the thread about is an expired dyndns hostname.

                                  the client side program is using olddomain.gotdns.com and that name is no longer valid on their network.  i don't want to get into why it isnt valid anymore, that isn't the point.  however, that is what prompted me to ask the question in this forum.

                                  yes, reinstalling the software will work, but sometimes finding another way around the problem is fun due to the challenge involved.

                                  thanks for the reply, jimp.

                                  1 Reply Last reply Reply Quote 0
                                  • G
                                    gogol
                                    last edited by

                                    Great, I have learned too  :D

                                    1 Reply Last reply Reply Quote 0
                                    • N
                                      nubletizer
                                      last edited by

                                      Does anyone know if this is possible now? This is useful in cases where you'd want to re-direct a URL to a reverse proxy.

                                      1 Reply Last reply Reply Quote 0
                                      • jimpJ
                                        jimp Rebel Alliance Developer Netgate
                                        last edited by

                                        No, you still cannot make a CNAME to an external hostname using built-in tools.

                                        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                                        Need help fast? Netgate Global Support!

                                        Do not Chat/PM for help!

                                        1 Reply Last reply Reply Quote 0
                                        • C
                                          cmbc
                                          last edited by

                                          Hello, any news on that?
                                          I try also to do the same to filter youtube.com content based on this docs:
                                          https://support.google.com/youtube/answer/6214622?hl=en

                                          Thanks for your help

                                          1 Reply Last reply Reply Quote 0
                                          • J
                                            Jon G
                                            last edited by

                                            I'm also trying to figure out how to configure pfsense to use the youtube filters:
                                            https://support.google.com/youtube/answer/6214622?hl=en

                                            If anyone has another approach I'd love to hear it.

                                            Thanks

                                            • Jon
                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.