Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    client could not take dns ip from pfsense

    Scheduled Pinned Locked Moved DHCP and DNS
    16 Posts 4 Posters 1.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • V
      vahedifar @JKnott
      last edited by

      @JKnott i used wireshrk for monitoring the packet received by local dns but it can not reply

      JKnottJ 1 Reply Last reply Reply Quote 0
      • JKnottJ
        JKnott @vahedifar
        last edited by

        @vahedifar

        Do you have DNS resolver or forwarder enabled?

        PfSense running on Qotom mini PC
        i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
        UniFi AC-Lite access point

        I haven't lost my mind. It's around here...somewhere...

        1 Reply Last reply Reply Quote 0
        • V
          vahedifar
          last edited by

          actually my lan interface doesn't answer to clients dns query.i enabled dns resolver

          1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator
            last edited by

            Dns resolver is default enabled... Did you modify rules on your lan interface... What are you trying to resolve exactly? Can pfsense look up say www.google.com via diag, dns lookup?

            Its possible upstream of pfsense blocks resolving, and you would have to forward..

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            1 Reply Last reply Reply Quote 0
            • V
              vahedifar
              last edited by

              yes it can resolve www.google.com
              the main problem is when client in my local domain send request to the local dns server,local dns server can not send it to pfsense.pfsense can not respond to them

              1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator
                last edited by johnpoz

                @vahedifar said in client could not take dns ip from pfsense:

                local dns server can not send it to pfsense.pfsense can not respond to them

                Huh???

                Your going to have to give some details of your setup

                So pfsense is say 192.168.1.1
                your client on this network is say 192.168.1.100
                And you have some other dns on your network running on say 192.168.1.2 Or is it on some other vlan?

                Your client asks 192.168.1.2 for something, www.google.com, or some local fqdn this dns is authoritative for? Either way how is pfsense at all in evolved in the conversation exactly... Does your other dns forward to pfsense? Does it forward to say 8.8.8.8 or some outside dns, does it try and resolve on its own?

                If you want help, your going to have to provide exact details of your setup... If you do not understand this setup yourself, how and the F are we suppose to guess to what your doing?

                how can make pf sense give dns to the clients

                Your original question is really just turn it on... Out of the box pfsense hands out its own IP to dhcp clients to point to it for dns, and out of the box it resolves... This is going to work like 99.9% of the time - only when pfsense can not resolve would this be an issue... Say on a satellite internet connection, or some Isp that blocks it, or something upstream that prevents it, etc.

                Doesn't sound like this what your doing at all - so if your wanting to run your own local dns, and then do X with it, and have your clients ask it... Your going to have to give us some actual details... And then to be honest, has zero to actually do with pfsense. You have validated pfsense can resolve, so have a client directly query pfsense lan IP... Does it answer you... Then anything else your doing has nothing to do with pfsense.

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                1 Reply Last reply Reply Quote 0
                • V
                  vahedifar
                  last edited by

                  i have inter vlan routing in my network,pfsense in a vlan A,servers such as dns ad and.. vlan B and clients in vlan C vlan D and...
                  no my dns does not forward to pfsens

                  1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator
                    last edited by

                    Yeah not helpful at all! Give no details what so ever..

                    If you want client in vlan X to talk to something in vlan Y... Then what are the rules on vlan X in pfsense? Does it allow dns? Are you policy routing and sending traffic out a gateway.

                    More than happy to help you, but I can not freaking guess to how you have shit setup... So give the details or your not going to get any help. Can not read minds, can not tell what the F your doing saying you are doing intervlan routing.. Where exactly on pfsense? You have some downstream router?

                    Draw up your network, provide your firewall rules. Show your setup for dns, where your clients point, where your dns is.. Does it even resolve? Are you just wanting clients to resolve your local AD..

                    Can not help you without info - sorry!

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                    1 Reply Last reply Reply Quote 0
                    • V
                      vahedifar
                      last edited by

                      i have intervlan routing
                      i wrote statice wrote for each vlans and define gate way
                      rules for accessing subnets to internet
                      my clients resolve local ad but when they want access to internet thier request recived by local dns and local dns can not answer them because pfsense cannot answer to the query
                      i will draw network diagram

                      1 Reply Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator
                        last edited by johnpoz

                        @vahedifar said in client could not take dns ip from pfsense:

                        have intervlan routing
                        i wrote statice wrote for each vlans and define gate way

                        Maybe you should post in your native language section... Because this is going nowhere.. That is useless... I might as well ask you to fix my car, and when you ask me what is wrong I say its blue..

                        And when you ask what color I want it, I say well yeah it has 4 tires. But the color is fine.

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.