Unresponsive WebUI on failed WAN

maxxer

thanks for your feedback.

do you know if there is already a bug filed on redmine?

ruicaramalho

Sorry I don't know.

doktornotor

As noted here: https://redmine.pfsense.org/issues/1407#note-9 - point your pfSense box to localhost for DNS; that is:

do NOT define any DNS servers there
do NOT tick the "Do not use the DNS Forwarder or Resolver as a DNS server for the firewall" checkbox.
have DNS forwarder or resolver running and set up your forwarders there.

ruicaramalho

I'm missing something then…

I'm using DNS resolver not DNS forwarder and I can't find an option to write the DNS forwarder (8.8.8.8 for example).

And because I have 2 fiber connections with static IP the provider does not give me a DNS forwarder like a DHCP connection.

So I must be doing somethig wrong?

Thanks

doktornotor

You do not need any forwarders defined when using DNS resolver. If you really insist:


forward-zone:
      name: "."
      forward-addr: 8.8.8.8
      forward-addr: 8.8.4.4

(goes into the advanced box).

ruicaramalho

Hi thanks, you are the man ;)

But I would like to understand how it works?

On a DNS server you always have the forwarder for 0.0.0.0.

So if it is not defined on the "Advanced box" as you have explained, what is the DNS resolver using as default forwarder?

Thanks

doktornotor

DNS resolver is recursive by default. Starts with well-known root servers.

ruicaramalho

OK it's clear now.

So it's probably using IANA root server list.

It would only fail if that list changes and that's very unusual.

Although a root server IP change is schedule for 1 December 2015

http://h.root-servers.org/renumber.html

johnpoz

1 root server changing its IP would not break dns via a resolver..

grandrivers

I think there is more to the gui hang than dns I also get a mail flood that seems to happen and am sure that contributes to the gui hang cause if i reset gui from console flood stops and gui becomes accessible