[Solved] Weird DNS Issue

KOM

Just use the existing DNS Resolver, and add a few host overrides for the internal sites you need access to.

MeCJay12

So I turned on auto DNS on the WAN port, DNS Forwarder off, and DNS Resolver on with host overrides for the two sites. Internet access and school sites act as if you entered their IP directly (connection not private and no access to services)

KOM

Internet access and school sites act as if you entered their IP directly (connection not private and no access to services)

I'm not sure I'm following you here. Can you give an example of what you're seeing?

MeCJay12

when I say it works I mean regular access (like just type in google.com). When I say it doesn't work I mean the login in pages are replaced with site not found. See attached. Google working. Canopy and catalyst not.

canopy.PNG_thumb

catalyst.PNG_thumb

google.PNG_thumb

doktornotor

I fail to see the relation of your screenshots with DNS.

MeCJay12

When I manually configure the school's DNS servers on my PC the sites work properly.

doktornotor

So what? Does that resolve to something different, or what? Point the entire uc.edu domain to your college servers via overrides.

KOM

My first guess would be that their pages are using resources on other servers that you do not have a host override for.

doktornotor

Yeah as said I'd start with adding a domain override instead.

MeCJay12

Let me give you more background. I have an ASUS router that for the longest time could not access any school services (exactly as you see in the pictures above). If I used a VPN I could use the school's stuff but it was annoying. I figured out that if I removed google's DNS from its configuration that I could access all the school's services without needing the vpn. Now I am trying to do the same thing with this pfsense router. It won't let me access any of the school's services without me manually configuring the school's DNS servers on each of my clients.

What IP would I use to override? The school have many sub-domains and it doesn't make sense to sit here and override each of those.

KOM

For domain overrides, you just specify the domain and the authoritative server for that domain.

Domain: uc.edu
IP address: LAN IP of school DNS server

Anything about uc.edu will be handled by their DNS.

MeCJay12

Alright. The override for the domain is setup and everything is working great. Thanks very much!