Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Problem DNS - LAN

    Scheduled Pinned Locked Moved DHCP and DNS
    39 Posts 5 Posters 6.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • G
      gio79
      last edited by

      Hello

      I have a Static IP on the WAN, I set the DNS values ​​in the General Setup page and I have not set any value in the boxes below (you can see in the picture)

      Each client on the LAN has not set no value on relished ethernet card, if I go to Windows DOS I see that DHCP assigns an IP address and DNS as it gives me the address on the LAN to pfSense

      But I can not navigate sites

      Hello and thank you

      Immagine0.jpg_thumb
      Immagine0.jpg
      Immagine11.jpg_thumb
      Immagine11.jpg

      1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator
        last edited by

        Is the dns forwarder running?  Can pfsense query dns using 8.8.8.8 ?

        From diag, dns lookup

        testpfsensedns.png_thumb
        testpfsensedns.png

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        1 Reply Last reply Reply Quote 0
        • G
          gio79
          last edited by

          Hello I have the DNS Forwarder active

          I did the test with DNS LOOKUP and you can see the result in the image

          I do not know what to do to run pfSense

          Hello and thank you

          Immagine1.jpg_thumb
          Immagine1.jpg

          1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator
            last edited by

            Well from that way that looks, no dns forwarder is not running. Or does not know where to forward too.  Or you have it not listening on the interfaces you need it to listen on, etc.
            Since you got no response from 127.0.0.1 – notice mine got a response.

            Post screen of dns forwarder page

            dnsforwarder.png_thumb
            dnsforwarder.png

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            1 Reply Last reply Reply Quote 0
            • G
              gio79
              last edited by

              Hello thanks for the help but it does not work

              On the DNS Forwarder I set the same values ​​that you have set

              On the General Setup what should I set?

              I have to make the rules on the firewall?

              Hello

              1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator
                last edited by

                Out of the box the default rules would be any any for the first lan interface.. If you add an OPT1 interface - say this 192.168.99 segment.. Then you would have to create rules on that interface to allow the traffic you want.

                So in the attached you will see the firewall rules for my dmz segment.  192.168.3.0/24 in my case - this would be sim to your 192.168.99 segment

                In my rules I allow traffic from the dmz segment to talk to my ntp server on my lan segment 192.168.1.0/24.. I allow traffic to my pfsense interface in that segment - in my case 192.168.3.253 for dns.  And I allow traffic not going to the local networks, ie my lan and wlan segments..

                What are you firewall rules on your segment?  And validate that pfsense is listening on that interfaces IP for dns forwarding.  Simple netstat should show it.

                [2.1.2-RELEASE][root@pfsense.local.lan]/root(3): netstat -an | grep .53
                tcp6      0      0 *.53                  .                    LISTEN
                tcp4      0      0 *.53                  .                    LISTEN
                udp6      0      0 *.53                  .
                udp4      0      0 *.53                  .

                So you can see *.53 here this means its listening on ALL IPs that pfsense has..

                So you can see a computer on that network can query pfsense for dns - which in turn goes and asks the dns server setup on it.

                dnsquery.png_thumb
                dnsquery.png
                firewallrules.png_thumb
                firewallrules.png

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                1 Reply Last reply Reply Quote 0
                • S
                  sali147
                  last edited by

                  hello guys
                  I have problem with DNS, I have DHCP server on pfsense and my domain users can obtain from it,I have configured DNS server on DC also Microsoft Radius server for captive portal and DNS forwarder configured on pf,but now users when enter URL (e.g www.google.com) dns problem occur ,but when they enter 8.8.8.8 in Address Bar it opens the captive portal logon page and after authentication it brings the page.
                  any suggestion?

                  1 Reply Last reply Reply Quote 0
                  • G
                    gio79
                    last edited by

                    Hello johnpoz

                    I tried to run the command
                    netstat-an | grep .53

                    but with the keyboard that I can not seem to do |

                    I do not know how to fix this DNS?

                    I did the command NSLOOKUP from a client on the LAN and I have results similar to yours except that there 's IP address of my pfSense

                    help help

                    1 Reply Last reply Reply Quote 0
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator
                      last edited by

                      If you did a nslookup and get the results like mine - then your dns is working..

                      So what exactly do you think is not working?  And what kind of keyboard does not do |  – normal keyboard it would same key as \ above your enter/return key -- and you don't really need to do that part - thats just so you don't get a full listing.. You could do just netstat -an

                      You know you could of just copied and pasted my command, etc.  Did you fall off the turnip truck yesterday?

                      kbqwerty.png
                      kbqwerty.png_thumb

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                      1 Reply Last reply Reply Quote 0
                      • G
                        gio79
                        last edited by

                        Hello I decided to reset the machine pfSense and start from scratch to figure out where the problem is

                        1 Reply Last reply Reply Quote 0
                        • johnpozJ
                          johnpoz LAYER 8 Global Moderator
                          last edited by

                          So that was 30 minutes ago.. You should be up and running already, it takes all of like 5 minutes to get pfsense up and running from scratch..  Unless your dicking with something - the default settings would have you up and running with dns, dhcp bing bang zoom.

                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                          If you get confused: Listen to the Music Play
                          Please don't Chat/PM me for help, unless mod related
                          SG-4860 24.11 | Lab VMs 2.8, 24.11

                          1 Reply Last reply Reply Quote 0
                          • G
                            gio79
                            last edited by

                            Hello I have noticed one thing on my LAN, excluding pfSense I have this situation:

                            • If I put a PC in DHCP and DNS worthless router assigns me an IP address because the DHCP is enabled on the router and DNS as I 212 216 112 112 who are my ISP's DNS, and in this situation I go on the internet no problem

                            • If I put a pc and I go to set the IP address without DNS but I do not surf on the internet

                            Now I'm redoing the pfSense machine and reboot from scratch and slowly we see that the problems I

                            1 Reply Last reply Reply Quote 0
                            • johnpozJ
                              johnpoz LAYER 8 Global Moderator
                              last edited by

                              "- If I put a pc and I go to set the IP address without DNS but I do not surf on the internet"

                              How exactly do you think you can surf the internet without dns?? So duh!!  if you don't set dns internet wouldn't work.

                              An intelligent man is sometimes forced to be drunk to spend time with his fools
                              If you get confused: Listen to the Music Play
                              Please don't Chat/PM me for help, unless mod related
                              SG-4860 24.11 | Lab VMs 2.8, 24.11

                              1 Reply Last reply Reply Quote 0
                              • G
                                gio79
                                last edited by

                                Hello

                                I installed pfSense from scratch and I saw that there was a mistake when I went to set the LAN card on pfSense, in fact, put the Gateway, and it would not let me run anything …. in fact if I went on Status - Gateway I Gateway is the the WAN to the LAN, the LAN I deleted that everything works now via DNS Forwarder can block facebook

                                Hello and thanks to all

                                1 Reply Last reply Reply Quote 0
                                • First post
                                  Last post
                                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.