Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Only Microsoft DNS not resolving

    Scheduled Pinned Locked Moved DHCP and DNS
    15 Posts 4 Posters 2.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • L
      LloydMeans
      last edited by

      Yes, the MS machines are using DHCP from the pfsense box, yea i've ran ipconfig, ipconfig /flushdns /release, /renew and even netsh winsock reset. Running an nslookup in ms just times out, the firewalls are all turned off all the way to the domain level, and as for Domains, i would not run a Microsoft domain or AD if my life depended on it on my business network. Mine are all bind domains, and run on Fedora 23 now. i do have one Ubuntu 14.04 webserver but thats getting moved over to Fedora 23. I am running an internal DNS server you can do a dnsstuff.com lookup on my domain destinyc46.net behind the PFS router. I do appricate you looking at this for me though, I i'm missing anything else or anything else you can think of let me know.

      1 Reply Last reply Reply Quote 0
      • M
        muswellhillbilly
        last edited by

        Ok, so what do you see when you run an 'ipconfig /all' on your Windows client? Does this show the correct IP range and DNS server? Does, for instance, the DNS server for your MS clients match the address of the DNS server entry for your Linux clients?

        1 Reply Last reply Reply Quote 0
        • L
          LloydMeans
          last edited by

          Yea it shows the info it pulls from pfs which is

          192.168.1.119 <= client address
          192.168.1.1    <= Gateway
          192.168.1.1    <=DNS

          and the mac for either the pc or the virt-manager machine. I know it has to be something i have set wrong in pfs, because the same machine can connect to a wifi router(netgear) that i have thats running on another inet connection and the dns resolves there its just something i know i have setup wrong in pfs, theres no big hurry on this one cause i really don't have any ms boxes running on my business network anyways, and if i do there all created on virt-manager really i just thought maybe someone ran across this issue, i really appricate your looking at this but dont spend alot of time on it dude.

          1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator
            last edited by

            "but with the current version of PFsense Unbound takes care of that right out of the gate and uses the dns you put in the general setup tab"

            unbound does not "forward" out of the box - current version of pfsense uses unbound yes, but it is not forwarding anywhere.  It is does full recursion, starting with roots down..  What that would have to do with linux or ms doing a query to it would be ZERO..

            Why don't you do a simple query, using nslookup, dig, drill, etc.. and what does it return.. Sniff on pfsense if you want..

            Did you F with the default lan rules?  And set to tcp only?  Maybe linux dns client is doing tcp quick than windows.. How exactly do you know dns is not working?  You browser?  Ping, actual dns query?

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            1 Reply Last reply Reply Quote 0
            • L
              LloydMeans
              last edited by

              Nope on the lan rule change. and here is the following nslookup info.
              nslookup destinyc46.net
              Server:        192.168.1.17
              Address:        192.168.1.17#53

              Name:  destinyc46.net
              Address: 50.2x.1xx.6x

              this is nslookup from my Ubuntu box with dns
              Windows 10 Virtual Machine

              c:\users\ nslookup destinyc46.net
              DNS request timed out.
              Server Unknown
              Address: 208.180.42.100

              DNS request timed out.

              I did enable the DNS fowarder service and still has issue.

              1 Reply Last reply Reply Quote 0
              • KOMK
                KOM
                last edited by

                Why are your Windows boxes trying to talk to 208.180.42.100, which resolves to rdns02.suddenlink.net?  You get a QUERY REFUSED response from that DNS.

                1 Reply Last reply Reply Quote 0
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator
                  last edited by

                  Well yeah 208.180 is not answering your dns query - what does that have to do with pfsense??

                  ;; QUESTION SECTION:
                  ;100.42.180.208.in-addr.arpa.  IN      PTR

                  ;; ANSWER SECTION:
                  100.42.180.208.in-addr.arpa. 86400 IN  PTR    rdns02.suddenlink.net.

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                  1 Reply Last reply Reply Quote 0
                  • KOMK
                    KOM
                    last edited by

                    Is it possible that you have your Windows hosts configured to get an IP via DHCP but you have static DNS?

                    1 Reply Last reply Reply Quote 0
                    • L
                      LloydMeans
                      last edited by

                      Well that was what was in the general setup screen for dns server, but that has been changed from 208 that is no longer in the dns list of servers.

                      1 Reply Last reply Reply Quote 0
                      • KOMK
                        KOM
                        last edited by

                        but that has been changed from 208 that is no longer in the dns list of servers.

                        Then why does the nslookup output refer to it??

                        OK, let's stop guessing.  Can you please provide screenshots of the following:

                        Your Firewall - Rules - LAN
                        Your System - General
                        Your Services - DNS Forwarder settings
                        Your Windows IP4 settings
                        Your output of ipconfig /all
                        Your output of nslookup destinyc46.net

                        1 Reply Last reply Reply Quote 0
                        • johnpozJ
                          johnpoz LAYER 8 Global Moderator
                          last edited by

                          The forwarder does not hand dns to client, the dhcp server does that.. And there is no setting in there to hand off what is in the general tab.. You would have to manually have put that in there..

                          Note: leave blank to use the system default DNS servers - this interface's IP if DNS Forwarder or Resolver is enabled, otherwise the servers configured on the General page.

                          Only way it would hand client something you have setup is that you don't have the forwarder or resolver enabled..

                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                          If you get confused: Listen to the Music Play
                          Please don't Chat/PM me for help, unless mod related
                          SG-4860 24.11 | Lab VMs 2.8, 24.11

                          1 Reply Last reply Reply Quote 0
                          • L
                            LloydMeans
                            last edited by

                            Ok it's fixed, thanks for you suggestions dudes finally figured it out, it was dns settings in wrong order on the dhcp server.

                            1 Reply Last reply Reply Quote 0
                            • johnpozJ
                              johnpoz LAYER 8 Global Moderator
                              last edited by

                              wrong order???  Why would there be an order??  If you want pfsense to be your dns, that is ALL there should be…  You don't use pfsense "and" list say google or 208.180 that doesn't even answer your query anyway...  Google doesn't know SHIT about any of your local devices, so is completely and utterly pointless to have the possibility for clients to ask google directly for anything and defeats the whole Fing reason for running dns on pfsense.

                              If you are running forwarder or resolver your dhcp server should have ZERO anything in there for dns, since it will point to the IP address of pfsense on that interface which is correct..

                              An intelligent man is sometimes forced to be drunk to spend time with his fools
                              If you get confused: Listen to the Music Play
                              Please don't Chat/PM me for help, unless mod related
                              SG-4860 24.11 | Lab VMs 2.8, 24.11

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.