Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    DNS Queries forwarded to active directory DNS Server does not find records

    Scheduled Pinned Locked Moved DHCP and DNS
    6 Posts 4 Posters 524 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • F
      fluentsoftware
      last edited by

      Hi,

      the goal i want to archive is that I could resolve IP-Adresses for hostnames of internal servers. For these szenario I have an Active Directory up and running, which also comes as a DNS Server. If I query an hostname using the internal DNS Server, everything looks fine:

      C:\Users\sschabbach>nslookup duplo 192.168.7.34
      Server:  milka.corp.fluent-software.vio
      Address:  192.168.7.34
      
      Name:    duplo.corp.fluent-software.vio
      Address:  192.168.7.33
      

      where 192.168.7.34 is the ip adress of the DNS Server.

      If I do the same from the DNS Forwarder/Resolver in pfSense I got the following output:

      C:\Users\sschabbach>nslookup duplo 192.168.7.242
      Server:  bounty.corp.fluent-software.vio
      Address:  192.168.7.242
      
      *** bounty.corp.fluent-software.vio can't find duplo: Non-existent domain
      

      For information 192.168.7.242 is the internal ip address from one of the LAN interfaces.

      Timings
      Name server 	Query time
      127.0.0.1	17 msec
      80.69.100.174	23 msec
      80.69.100.198	23 msec
      8.8.8.8	22 msec
      8.8.4.4	23 msec
      192.168.7.34	8248 msec
      
      
      

      From the DNS Diagnostics I see that it takes much time to query the internal DNS Server, but if I query the DNS Server directly everything seems smoothly.

      Any ideas on that?
      Kind regards,
      Sebastian.

      1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator
        last edited by

        @fluentsoftware said in DNS Queries forwarded to active directory DNS Server does not find records:

        nslookup duplo 192.168.7.34

        duplo is not a fqdn... No shit your having issues with resolving it... query

        duplo.corp.fluent-software.vio

        your nslookup is adding the domain for you... set debug on it and see for yourself..

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        1 Reply Last reply Reply Quote 0
        • kiokomanK
          kiokoman LAYER 8
          last edited by kiokoman

          and for sure this dns servers known nothing about your local zone :

          80.69.100.174 23 msec
          80.69.100.198 23 msec
          8.8.8.8 22 msec
          8.8.4.4 23 msec

          ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
          Please do not use chat/PM to ask for help
          we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
          Don't forget to Upvote with the 👍 button for any post you find to be helpful.

          1 Reply Last reply Reply Quote 0
          • S
            SteveITS Galactic Empire
            last edited by

            Under the DNS Resolver settings, under Domain Overrides, add your Windows domain and Windows DNS servers.

            Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
            When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
            Upvote 👍 helpful posts!

            1 Reply Last reply Reply Quote 0
            • F
              fluentsoftware
              last edited by

              Wow, pretty nice support in a very little amount of time. The Trick with the Domain Overrides works well.
              Could anyone tell me what the Domain overrides does?

              Kind regards,
              Sebastian.

              1 Reply Last reply Reply Quote 0
              • kiokomanK
                kiokoman LAYER 8
                last edited by

                domain override forward all queries for that domain to the specified IP (it's already written in the description, i don't know what else can be added)
                The IP address is treated as the authoritative lookup server for the domain (including all of its subdomains), and other lookup servers will not be queried

                ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
                Please do not use chat/PM to ask for help
                we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
                Don't forget to Upvote with the 👍 button for any post you find to be helpful.

                1 Reply Last reply Reply Quote 0
                • First post
                  Last post
                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.