Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Transparently Intercept and Redirect DNS Traffic to an Internal DNS

    Scheduled Pinned Locked Moved NAT
    54 Posts 9 Posters 20.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      Marv21 @gniting
      last edited by

      @ibbetsion
      Both are /24 ?

      1 Reply Last reply Reply Quote 0
      • gnitingG
        gniting
        last edited by

        Yes

        M 1 Reply Last reply Reply Quote 0
        • M
          Marv21 @gniting
          last edited by Marv21

          @ibbetsion
          Hmm.
          What you could try (if you have not done any own modifications in the filesystem) - Backup everything, reinstall Pfsense und roll back the Backup.
          I had it once a while (4years or greater) that i had done this and suddenly everything was ok.

          Is this a Virtualized Maschine or something?

          Could you post all NAT Rules, Outbond Page, Lan Rules and DNSNet rules here as Screenshots?

          Do you have any Floating Rules?

          gnitingG 1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator
            last edited by

            @Marv21 said in Transparently Intercept and Redirect DNS Traffic to an Internal DNS:

            s this a Virtualized Maschine or something?

            That is a great question...

            Why don't you just sniff and see exactly what is happening..

            I don't intercept traffic on the same interface and send back in, but yes that outbound nat automatic should do make it look like i comes from the pfsense interface in that network when you do it that way..

            If pfsense redirects traffic and doesn't nat it or is not the gateway for the return.. Then yes your client is going to scream at you you - wtf is this I sent to A, why is B sending me a response.

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            gnitingG 1 Reply Last reply Reply Quote 0
            • gnitingG
              gniting @Marv21
              last edited by

              @Marv21 said in Transparently Intercept and Redirect DNS Traffic to an Internal DNS:

              @ibbetsion
              Hmm.
              What you could try (if you have not done any own modifications in the filesystem) - Backup everything, reinstall Pfsense und roll back the Backup.
              I had it once a while (4years or greater) that i had done this and suddenly everything was ok.

              Is this a Virtualized Maschine or something?

              Could you post all NAT Rules, Outbond Page, Lan Rules and DNSNet rules here as Screenshots?

              Do you have any Floating Rules?

              No floating rules and machine is not virtualized. I will try the reinstall recommendation.

              1 Reply Last reply Reply Quote 0
              • gnitingG
                gniting @johnpoz
                last edited by

                @johnpoz will attempt to diagnose using packet capture.

                M 1 Reply Last reply Reply Quote 0
                • M
                  Marv21 @gniting
                  last edited by

                  @ibbetsion
                  Something new on this?

                  1 Reply Last reply Reply Quote 0
                  • gnitingG
                    gniting
                    last edited by

                    Unfortunately not yet. I am attempting to procure a completely separate host to try this out vs having a host that has two NICs (with each NIC on one of two subnets). Just trying to minimize the variables.

                    M 1 Reply Last reply Reply Quote 0
                    • M
                      Marv21 @gniting
                      last edited by

                      @ibbetsion
                      At the Moment you have only one NIC with two VLANs?

                      gnitingG 1 Reply Last reply Reply Quote 0
                      • gnitingG
                        gniting @Marv21
                        last edited by

                        @Marv21 No, there are no vlans. The host has two physical NICs.

                        1 Reply Last reply Reply Quote 0
                        • johnpozJ johnpoz referenced this topic on
                        • johnpozJ johnpoz referenced this topic on
                        • johnpozJ johnpoz referenced this topic on
                        • johnpozJ johnpoz referenced this topic on
                        • johnpozJ johnpoz referenced this topic on
                        • johnpozJ johnpoz referenced this topic on
                        • johnpozJ johnpoz referenced this topic on
                        • johnpozJ johnpoz referenced this topic on
                        • johnpozJ johnpoz referenced this topic on
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.