Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Cname/alias for external domain

    Scheduled Pinned Locked Moved DHCP and DNS
    34 Posts 8 Posters 21.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • ?
      A Former User
      last edited by

      @doktornotor:

      I have no idea what "program" are we talking about here. If you expect that pfsense DNS record will rewrite e.g. www.google.com to www.bing.com in your browser URL bar, then it's not what's gonna happen.

      on the client side (the program) it will use the original domain old.domaina.com

      it is a cname, have you ever worked with cnames?  that is what i am looking to do.

      1 Reply Last reply Reply Quote 0
      • D
        doktornotor Banned
        last edited by

        Your CNAME will not work if the program somehow works with the requested hostname. Once again, see example above… It won't work either if we are talking about some IP camera with a webserver.

        1 Reply Last reply Reply Quote 0
        • ?
          A Former User
          last edited by

          @doktornotor:

          Your CNAME will not work if the program somehow works with the requested hostname. Once again, see example above…

          it works all the time in the scenarios where i am hosting my own domain and i can create a cname.  it doesn't seem that i can do that in pfsense.

          1 Reply Last reply Reply Quote 0
          • D
            doktornotor Banned
            last edited by

            Well, that's awesome. How about reinstalling the broken thing instead of inventing similar nonsense like hijacking nonexistant hostname with a DNS forwarder?

            1 Reply Last reply Reply Quote 0
            • ?
              A Former User
              last edited by

              @doktornotor:

              Well, that's awesome. How about reinstalling the broken thing instead of inventing similar nonsense like hijacking nonexistant hostname with a DNS forwarder?

              happens all the time with cnames, i guess it just isnt part of pfsense.

              1 Reply Last reply Reply Quote 0
              • D
                doktornotor Banned
                last edited by

                Fail to see why it should do any such thing in the first place. It's a DNS forwarder.

                1 Reply Last reply Reply Quote 0
                • ?
                  A Former User
                  last edited by

                  @doktornotor:

                  Fail to see why it should do any such thing in the first place. It's a DNS forwarder.

                  i wasn't referencing that section, specifically, just if pfsense could do it.

                  1 Reply Last reply Reply Quote 0
                  • D
                    doktornotor Banned
                    last edited by

                    Sure; install tinydns or bind, or another authoritative DNS server. Neither dnsmasq, nor unbound. Or finally stop wasting the time and invest 5 minutes into reinstalling whatever broken thing you have there, instead of discussing for two days how to work around it.

                    1 Reply Last reply Reply Quote 0
                    • ?
                      A Former User
                      last edited by

                      @doktornotor:

                      Sure; install tinydns or bind, or another authoritative DNS server. Neither dnsmasq, nor unbound. Or finally stop wasting the time and invest 5 minutes into reinstalling whatever broken thing you have there, instead of discussing for two days how to work around it.

                      get the stick out of your ass.

                      if you don't want to help, that's fine with me.

                      i could have posted the question and gotten a reply 10 minutes later.  there goes your two day comment.

                      also, had pfsense had this feature and someone posted about it, it would have answered my question and i could have used it for something else in the future.

                      1 Reply Last reply Reply Quote 0
                      • D
                        doktornotor Banned
                        last edited by

                        @tomdlgns:

                        get the stick out of your ass.

                        Thanks for your kind "recommendation". Just found the ignore list feature, sanity restored.  ::)

                        1 Reply Last reply Reply Quote 0
                        • jimpJ
                          jimp Rebel Alliance Developer Netgate
                          last edited by

                          It's actually a valid question/use case. Ugly, sure. Not ideal? Certainly. But there are always devices you cannot control. Black boxes from vendors that won't update or would charge exorbitant fees to do so.

                          Unfortunately the way that CNAME records work in dnsmasq, the target of the CNAME must also be locally known. So you can CNAME something in /etc/hosts, but not something that would involve making a query to another remote DNS server. It's a limitation of dnsmasq, not DNS in general.

                          There is a more in-depth answer here:
                          http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2006q1/000583.html

                          But ultimately, to do that you'll need a much fancier DNS system.

                          If you happen to have a domain with Namecheap, their hosted DNS that you can manage in their control panel does support this function.

                          Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                          Need help fast? Netgate Global Support!

                          Do not Chat/PM for help!

                          1 Reply Last reply Reply Quote 0
                          • ?
                            A Former User
                            last edited by

                            @jimp:

                            It's actually a valid question/use case. Ugly, sure. Not ideal? Certainly. But there are always devices you cannot control. Black boxes from vendors that won't update or would charge exorbitant fees to do so.

                            Unfortunately the way that CNAME records work in dnsmasq, the target of the CNAME must also be locally known. So you can CNAME something in /etc/hosts, but not something that would involve making a query to another remote DNS server. It's a limitation of dnsmasq, not DNS in general.

                            There is a more in-depth answer here:
                            http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2006q1/000583.html

                            But ultimately, to do that you'll need a much fancier DNS system.

                            If you happen to have a domain with Namecheap, their hosted DNS that you can manage in their control panel does support this function.

                            thank you, this is helpful, in that, it is a better response as to why it won't work.

                            the current domain/old domain i started the thread about is an expired dyndns hostname.

                            the client side program is using olddomain.gotdns.com and that name is no longer valid on their network.  i don't want to get into why it isnt valid anymore, that isn't the point.  however, that is what prompted me to ask the question in this forum.

                            yes, reinstalling the software will work, but sometimes finding another way around the problem is fun due to the challenge involved.

                            thanks for the reply, jimp.

                            1 Reply Last reply Reply Quote 0
                            • G
                              gogol
                              last edited by

                              Great, I have learned too  :D

                              1 Reply Last reply Reply Quote 0
                              • N
                                nubletizer
                                last edited by

                                Does anyone know if this is possible now? This is useful in cases where you'd want to re-direct a URL to a reverse proxy.

                                1 Reply Last reply Reply Quote 0
                                • jimpJ
                                  jimp Rebel Alliance Developer Netgate
                                  last edited by

                                  No, you still cannot make a CNAME to an external hostname using built-in tools.

                                  Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                                  Need help fast? Netgate Global Support!

                                  Do not Chat/PM for help!

                                  1 Reply Last reply Reply Quote 0
                                  • C
                                    cmbc
                                    last edited by

                                    Hello, any news on that?
                                    I try also to do the same to filter youtube.com content based on this docs:
                                    https://support.google.com/youtube/answer/6214622?hl=en

                                    Thanks for your help

                                    1 Reply Last reply Reply Quote 0
                                    • J
                                      Jon G
                                      last edited by

                                      I'm also trying to figure out how to configure pfsense to use the youtube filters:
                                      https://support.google.com/youtube/answer/6214622?hl=en

                                      If anyone has another approach I'd love to hear it.

                                      Thanks

                                      • Jon
                                      1 Reply Last reply Reply Quote 0
                                      • I
                                        idarlund
                                        last edited by

                                        This post is deleted!
                                        1 Reply Last reply Reply Quote 0
                                        • First post
                                          Last post
                                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.