Dns query

techy82

thanks very much

I am using pfsense for dns, and openvpn (PIA) is set as the default gateway

I setup a new rule with the devices IP to point to WAN instead of the OpenVPN connection, but it doesn't resolve dns, I shall try this.

Thanks again

techy82

Hi

I have my ps4 lan rule to forward straight to the WAN, would I just add another rule on the lan interface to pass dns traffic to port 53?

Thanks very much really appreciate the help!

Capture.PNG_thumb

viragomann

Yes, the rule for accessing the LAN interface must not have set a gateway.

Your PS4 rule allows only traffic to the WAN GW. Access to LAN address do not pass this. So you have to an additional rule for DNS using no gateway (set to default) and put it above the other PS4 rule.

techy82

thats great thanks very much, really appreciate your help! :-)

techy82

Hi

does the below set off rules look okay?

Thanks again!

Capture2.PNG_thumb

johnpoz

Other than dns uses UDP, and sometimes - not very often tcp. An you only have tcp vs udp/tcp on your dns rule.

And your Source port should be ANY.. not 53… Your dest is 53, but you have no idea what port the client would use for a dns query.

viragomann

I mentioned it above in Reply #3.
:)

johnpoz

You did - and clearly he didn't listen ;)

viragomann

Sure, it won't be any risk if also other clients access the DNS server. Since you control all clients this is on you anyway.
You may also add an Alias for a group of granted host address (Firewall > Aliases > IP) and use this on in the firewall rule for source.

techy82

Thanks very much working great now appreciate your help ;D