Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    client could not take dns ip from pfsense

    Scheduled Pinned Locked Moved DHCP and DNS
    16 Posts 4 Posters 1.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • GertjanG
      Gertjan @vahedifar
      last edited by Gertjan

      What do you mean with :
      @vahedifar said in client could not take dns ip from pfsense:

      i have dhcp in my network

      ?

      If pfSense is your DHCP server, set up a DNS address into the settings of the DHCP server - normally not needed if pfSense is also your network DNS.

      No "help me" PM's please. Use the forum, the community will thank you.
      Edit : and where are the logs ??

      V 1 Reply Last reply Reply Quote 0
      • V
        vahedifar @Gertjan
        last edited by

        @Gertjan
        thanks
        i have my own dhcp and dns in my domain.clients take ip and dns ip from my dhcp and dns in my local domain.

        GertjanG 1 Reply Last reply Reply Quote 0
        • GertjanG
          Gertjan @vahedifar
          last edited by

          @vahedifar said in client could not take dns ip from pfsense:

          own dhcp and dns in my domain

          Well : what does this DHCP hands over to your DHCP-Clients ?
          ( if Windows client : type "ipconfig /all" and you have your answer )
          If not good, correct the settings of that DHCP server.
          Keep in mind : a DHCP hands over an IP - the mask, the gateway, the NTP, the DNS, etc etc etc.

          Because your are not using pfSense , it not a "pfSense question", you probably have shut down the DHCP server.

          No "help me" PM's please. Use the forum, the community will thank you.
          Edit : and where are the logs ??

          1 Reply Last reply Reply Quote 0
          • V
            vahedifar
            last edited by

            no dhcp server is OK, if i want dhcp deliver public dns ip i should add 8.8.8.8 in dhcp scope but if clients get 8.8.8.8 for dns they can access internet but they cant access local hosts

            JKnottJ 1 Reply Last reply Reply Quote 0
            • JKnottJ
              JKnott @vahedifar
              last edited by

              @vahedifar

              Try using Packet Capture to see what's happening on the wire. Are the DNS requests going to the correct address? Is there a response?

              PfSense running on Qotom mini PC
              i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
              UniFi AC-Lite access point

              I haven't lost my mind. It's around here...somewhere...

              V 1 Reply Last reply Reply Quote 0
              • V
                vahedifar @JKnott
                last edited by

                @JKnott i used wireshrk for monitoring the packet received by local dns but it can not reply

                JKnottJ 1 Reply Last reply Reply Quote 0
                • JKnottJ
                  JKnott @vahedifar
                  last edited by

                  @vahedifar

                  Do you have DNS resolver or forwarder enabled?

                  PfSense running on Qotom mini PC
                  i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                  UniFi AC-Lite access point

                  I haven't lost my mind. It's around here...somewhere...

                  1 Reply Last reply Reply Quote 0
                  • V
                    vahedifar
                    last edited by

                    actually my lan interface doesn't answer to clients dns query.i enabled dns resolver

                    1 Reply Last reply Reply Quote 0
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator
                      last edited by

                      Dns resolver is default enabled... Did you modify rules on your lan interface... What are you trying to resolve exactly? Can pfsense look up say www.google.com via diag, dns lookup?

                      Its possible upstream of pfsense blocks resolving, and you would have to forward..

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                      1 Reply Last reply Reply Quote 0
                      • V
                        vahedifar
                        last edited by

                        yes it can resolve www.google.com
                        the main problem is when client in my local domain send request to the local dns server,local dns server can not send it to pfsense.pfsense can not respond to them

                        1 Reply Last reply Reply Quote 0
                        • johnpozJ
                          johnpoz LAYER 8 Global Moderator
                          last edited by johnpoz

                          @vahedifar said in client could not take dns ip from pfsense:

                          local dns server can not send it to pfsense.pfsense can not respond to them

                          Huh???

                          Your going to have to give some details of your setup

                          So pfsense is say 192.168.1.1
                          your client on this network is say 192.168.1.100
                          And you have some other dns on your network running on say 192.168.1.2 Or is it on some other vlan?

                          Your client asks 192.168.1.2 for something, www.google.com, or some local fqdn this dns is authoritative for? Either way how is pfsense at all in evolved in the conversation exactly... Does your other dns forward to pfsense? Does it forward to say 8.8.8.8 or some outside dns, does it try and resolve on its own?

                          If you want help, your going to have to provide exact details of your setup... If you do not understand this setup yourself, how and the F are we suppose to guess to what your doing?

                          how can make pf sense give dns to the clients

                          Your original question is really just turn it on... Out of the box pfsense hands out its own IP to dhcp clients to point to it for dns, and out of the box it resolves... This is going to work like 99.9% of the time - only when pfsense can not resolve would this be an issue... Say on a satellite internet connection, or some Isp that blocks it, or something upstream that prevents it, etc.

                          Doesn't sound like this what your doing at all - so if your wanting to run your own local dns, and then do X with it, and have your clients ask it... Your going to have to give us some actual details... And then to be honest, has zero to actually do with pfsense. You have validated pfsense can resolve, so have a client directly query pfsense lan IP... Does it answer you... Then anything else your doing has nothing to do with pfsense.

                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                          If you get confused: Listen to the Music Play
                          Please don't Chat/PM me for help, unless mod related
                          SG-4860 24.11 | Lab VMs 2.8, 24.11

                          1 Reply Last reply Reply Quote 0
                          • V
                            vahedifar
                            last edited by

                            i have inter vlan routing in my network,pfsense in a vlan A,servers such as dns ad and.. vlan B and clients in vlan C vlan D and...
                            no my dns does not forward to pfsens

                            1 Reply Last reply Reply Quote 0
                            • johnpozJ
                              johnpoz LAYER 8 Global Moderator
                              last edited by

                              Yeah not helpful at all! Give no details what so ever..

                              If you want client in vlan X to talk to something in vlan Y... Then what are the rules on vlan X in pfsense? Does it allow dns? Are you policy routing and sending traffic out a gateway.

                              More than happy to help you, but I can not freaking guess to how you have shit setup... So give the details or your not going to get any help. Can not read minds, can not tell what the F your doing saying you are doing intervlan routing.. Where exactly on pfsense? You have some downstream router?

                              Draw up your network, provide your firewall rules. Show your setup for dns, where your clients point, where your dns is.. Does it even resolve? Are you just wanting clients to resolve your local AD..

                              Can not help you without info - sorry!

                              An intelligent man is sometimes forced to be drunk to spend time with his fools
                              If you get confused: Listen to the Music Play
                              Please don't Chat/PM me for help, unless mod related
                              SG-4860 24.11 | Lab VMs 2.8, 24.11

                              1 Reply Last reply Reply Quote 0
                              • V
                                vahedifar
                                last edited by

                                i have intervlan routing
                                i wrote statice wrote for each vlans and define gate way
                                rules for accessing subnets to internet
                                my clients resolve local ad but when they want access to internet thier request recived by local dns and local dns can not answer them because pfsense cannot answer to the query
                                i will draw network diagram

                                1 Reply Last reply Reply Quote 0
                                • johnpozJ
                                  johnpoz LAYER 8 Global Moderator
                                  last edited by johnpoz

                                  @vahedifar said in client could not take dns ip from pfsense:

                                  have intervlan routing
                                  i wrote statice wrote for each vlans and define gate way

                                  Maybe you should post in your native language section... Because this is going nowhere.. That is useless... I might as well ask you to fix my car, and when you ask me what is wrong I say its blue..

                                  And when you ask what color I want it, I say well yeah it has 4 tires. But the color is fine.

                                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                                  If you get confused: Listen to the Music Play
                                  Please don't Chat/PM me for help, unless mod related
                                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                                  1 Reply Last reply Reply Quote 0
                                  • First post
                                    Last post
                                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.