Newbie to pfsense, got typo in WAN host name How to fix?

jimp · Oct 29, 2018, 4:37 PM

If it's what you see in the ARP page, that should be what is resolved locally, so either the hostname under System > General or maybe a host override.

If it's the GUI cert that has an unexpected hostname, then you can make a new cert manually, or use pfSsh.php playback generateguicert after correcting the hostname, or (Even better) use ACME to get a real trusted cert.

If it's a VPN cert, make a new server cert.

If you can't find where else the wrong hostname is present, download a config.xml backup and then open it in a text editor. Do a search inside for the incorrect name.

markp4289 · Oct 29, 2018, 5:02 PM

Hmmmm; My WAN link is static IP and config that's why I thought it was my typo. I just got off the phone with TWC took an about to get to the Level III that knew what I was talking about. This is the 4 th TWC problem that I've had in 7 days.

johnpoz · Oct 29, 2018, 5:34 PM

Looks like they BROKE it to me.. now all you get back is SOA when you query the SOA for that PTR ;)

So vs them fixing it to the actual fqdn you wanted to be returned, they just removed the record completely ;)

stephenw10 · Oct 29, 2018, 5:43 PM

Nice.

Though still not clear to me why that should be an issue. If this is just VPN clients refusing the cert just regenerate it.

Steve

johnpoz · Oct 29, 2018, 5:45 PM

Its not an issue what his PTR reports or doesn't report has ZERO to do with his overall problem.. I believe what he saw in his arp table just confused him..

markp4289 · Oct 29, 2018, 7:03 PM

After TWC deleted PTR records.
login-to-view

johnpoz · Oct 29, 2018, 7:10 PM

yup that is what I show for those IPs PTR ;)

I don't see any vpn one though? the forward points to .242 but the PTR is just gone.

markp4289 · Oct 29, 2018, 7:12 PM

So it looks like the General setup generates the LAN hostname but nowhere is the WAN hostname entered. How do I get the WAN hostname in there?

stephenw10 · Oct 29, 2018, 7:25 PM

That is the WAN hostname. Or at least that is the name send by dhclient to an upstream server.

Steve

johnpoz · Oct 29, 2018, 7:28 PM

Get it in where?? Not sure why you think you need a WAN IP to resolve to something in your arp table for vpn clients to connect to you?

I am thinking you still don't quite grasp what a PTR or reverse is...

Your vpn.domain.tld resolves to IP.242 address.