Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Internet on windows but not ubuntu bad pfsense configuration?

    Scheduled Pinned Locked Moved General pfSense Questions
    41 Posts 4 Posters 6.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • F
      Farisse @Raffi_
      last edited by

      @Raffi_ said in Internet on windows but not ubuntu bad pfsense configuration?:

      That needs to be cleared up
      ab03e6ef-f63e-4a24-965b-2c6d5d2510e0-image.png

      I activated dns resolver with forwarding but still doesn't work.

      I try it with Chrome and i receive this error:
      6789f615-6acc-4bd2-b805-6d46109a08df-image.png

      Raffi_R 1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        Yeah that is catastrophically bad! Something is very broken there.

        I guess the DNS timeout in Windows is higher which is why it worked.

        You don't see localhost there so you probably have 'Do not use the DNS Forwarder/DNS Resolver as a DNS server for the firewall' set in System > General setup. That doesn't make much difference unless you have host overrides there the firewall should use.

        Steve

        Raffi_R F 2 Replies Last reply Reply Quote 0
        • DaddyGoD
          DaddyGo @Raffi_
          last edited by

          @Raffi_ said in Internet on windows but not ubuntu bad pfsense configuration?:

          Woaw 8 seconds for a query could be your issue. Those DNS servers are used only for this DMZ?

          I thought I would note this too, but I rather skipped it, hihihihhi ๐Ÿ‘ ๐Ÿ˜‰

          Cats bury it so they can't see it!
          (You know what I mean if you have a cat)

          1 Reply Last reply Reply Quote 1
          • Raffi_R
            Raffi_ @Farisse
            last edited by

            I activated dns resolver with forwarding but still doesn't work.

            I try it with Chrome and i receive this error:
            6789f615-6acc-4bd2-b805-6d46109a08df-image.png

            Try it a second time. Once unbound caches it, it should come right up the second time.

            1 Reply Last reply Reply Quote 0
            • Raffi_R
              Raffi_ @stephenw10
              last edited by

              @stephenw10 said in Internet on windows but not ubuntu bad pfsense configuration?:

              You don't see localhost there so you probably have 'Do not use the DNS Forwarder/DNS Resolver as a DNS server for the firewall' set in System > General setup. That doesn't make much difference unless you have host overrides there the firewall should use.

              Steve

              Would dnsmaq use the local host as well or is that only the default for unbound?

              DaddyGoD 1 Reply Last reply Reply Quote 0
              • F
                Farisse @stephenw10
                last edited by Farisse

                @stephenw10 Its not after you told me i should probably have the localhost as respond i remembered i had in the beginning in general information the localhost and then not anymore. So i've add it back with the dns server (good or wrong way idk) But ly query is a lot faster now.
                9c593d97-30bd-4262-9b1c-0fda6f9bc8c3-image.png
                But the option "Do not use the DNS Forwarder/DNS Resolver as a DNS server for the firewall " is not set in.
                952c42a0-8e53-44fa-8e68-fb174493134d-image.png

                @Raffi_ I also tried it a second and third time, but no result. Or ... the same result.

                1 Reply Last reply Reply Quote 0
                • Raffi_R
                  Raffi_
                  last edited by Raffi_

                  If you are using DNS resolver with forwarding mode, the first option will be the local host by default. There is no need to enter it again under DNS Server Settings in the General setup tab.

                  Edit, something doesn't seem right with those 1ms query times. How would it go from 8 seconds to 1ms? I think this might be the DNS lookup GUI bug I've seen in the past.

                  Run those dig commands from pfSense instead.
                  Diagnostics/ Command Prompt
                  dig @172.20.0.253 google.com
                  dig @172.20.0.254 google.com

                  I think those might give you the real results.

                  F 1 Reply Last reply Reply Quote 0
                  • DaddyGoD
                    DaddyGo @Raffi_
                    last edited by

                    @Raffi_

                    just an idea
                    it would be worthwhile to look at and compare these:

                    Windows: https://docs.microsoft.com/en-us/previous-versions//cc977482(v=technet.10)?redirectedfrom=MSDN

                    Linux: /etc/resolv.conf

                    search domain.net
                    option timeout:1
                    nameserver 1.1.1.1
                    nameserver 2.2.2.2
                    nameserver 3.3.3.3

                    or something like that

                    Cats bury it so they can't see it!
                    (You know what I mean if you have a cat)

                    1 Reply Last reply Reply Quote 0
                    • F
                      Farisse @Raffi_
                      last edited by

                      @Raffi_
                      b958cd9d-7c01-48ee-9d97-6ea2e1a68972-image.png 710c96f0-0f10-41a3-8146-01e4c9b6f1cd-image.png

                      I removed the localhost from the general setting and these are the results

                      @DaddyGo It was a good suggestion, but unfortunately /etc/resolv.conf is managed by systemd-resolved who is used by netplan /etc/netplan/*.yaml

                      1 Reply Last reply Reply Quote 0
                      • Raffi_R
                        Raffi_
                        last edited by Raffi_

                        Interesting, well the two DNS servers seem to be responding better now. That could also be because they are caching.

                        How is Ubuntu getting its interface settings? Is it statically assigned in Ubuntu or is it set to automatic (DHCP)? There were no leases in your DHCP list.

                        1 Reply Last reply Reply Quote 0
                        • F
                          Farisse
                          last edited by Farisse

                          I assigned static ip through /etc/netplan/01-network-manager-all.yaml

                          8289bd18-79be-4859-a103-cc2f027aab86-image.png

                          Everything seems good to me....

                          Edit, maybe an non relevant information, i can not ping the other vms in the dmz network. But my other vms can ping my ubuntu vm. Could it be something to do with routing ?

                          1 Reply Last reply Reply Quote 0
                          • Raffi_R
                            Raffi_
                            last edited by

                            Try running a packet capture on the DMZ of pfSense.
                            Diagnostics/ Packet Capture
                            Select DMZ, then in Count enter a very high value such as 10000. You can enter 0 but don't forget to stop the capture manually otherwise it will run a continuous capture and it can become a problem.

                            Download the capture data to wireshark and check for DNS info.

                            Dumb question, but have you tried to ping 8.8.8.8 from ubuntu? Does that work or is that failing as well?

                            F 2 Replies Last reply Reply Quote 0
                            • F
                              Farisse @Raffi_
                              last edited by

                              @Raffi_ said in Internet on windows but not ubuntu bad pfsense configuration?:

                              Dumb question, but have you tried to ping 8.8.8.8 from ubuntu? Does that work or is that failing as well?

                              Nope doesn't work because its blocked by the school.

                              I'll try the packet in a few minutes

                              Raffi_R 1 Reply Last reply Reply Quote 0
                              • Raffi_R
                                Raffi_ @Farisse
                                last edited by

                                @Farisse said in Internet on windows but not ubuntu bad pfsense configuration?:

                                @Raffi_ said in Internet on windows but not ubuntu bad pfsense configuration?:

                                Dumb question, but have you tried to ping 8.8.8.8 from ubuntu? Does that work or is that failing as well?

                                Nope doesn't work because its blocked by the school.

                                I'll try the packet in a few minutes

                                ICMP is blocked or google DNS server specifically is blocked?

                                1 Reply Last reply Reply Quote 0
                                • F
                                  Farisse
                                  last edited by

                                  ICMP I guess. I can ping outside the network but not 8.8.8.8 or 8.8.4.4 I wont recieve any result wit this commands i began the ping on ubuntu and then on the windows machine who got internet:

                                  086ed859-11b6-4a63-b7b7-8e99662291b9-image.png

                                  1 Reply Last reply Reply Quote 0
                                  • F
                                    Farisse @Raffi_
                                    last edited by

                                    @Raffi_ said in Internet on windows but not ubuntu bad pfsense configuration?:

                                    Select DMZ, then in Count enter a very high value such as 10000. You can enter 0 but don't forget to stop the capture manually otherwise it will run a continuous capture and it can become a problem.
                                    Download the capture data to wireshark and check for DNS info.

                                    So apparently my ubuntu machine does not send any dns request :

                                    2225e6fe-06a3-4207-82a3-72f4b6608b51-image.png

                                    Raffi_R 1 Reply Last reply Reply Quote 0
                                    • Raffi_R
                                      Raffi_ @Farisse
                                      last edited by

                                      @Farisse said in Internet on windows but not ubuntu bad pfsense configuration?:

                                      So apparently my ubuntu machine does not send any dns request :

                                      2225e6fe-06a3-4207-82a3-72f4b6608b51-image.png

                                      That's not good. Is it even able to talk to pfSense at all? Can you ping pfSense (192.168.1.1) from Ubuntu?

                                      1 Reply Last reply Reply Quote 0
                                      • F
                                        Farisse
                                        last edited by

                                        Yup but not able to ping windows machine

                                        709f9d29-bf60-4c42-92a0-401482698b4d-image.png

                                        Raffi_R 1 Reply Last reply Reply Quote 0
                                        • Raffi_R
                                          Raffi_ @Farisse
                                          last edited by

                                          @Farisse said in Internet on windows but not ubuntu bad pfsense configuration?:

                                          Yup but not able to ping windows machine

                                          709f9d29-bf60-4c42-92a0-401482698b4d-image.png

                                          It can't ping Windows because by default Windows does not respond to ping. That has to be manually enabled in Windows. It is responding to pfSense though. So at least there is some sign of life there.

                                          1 Reply Last reply Reply Quote 0
                                          • F
                                            Farisse
                                            last edited by

                                            Damn forgot to disable fw on this windows machine. >.<"

                                            So apparently I don't know why, I suddenly have internet on my ubuntu machine.

                                            I did not change anything i've reset my ubuntu vm twice to be sure and it seems to work. What the hell is going on here :o i think i'm losing my mind

                                            Raffi_R DaddyGoD 2 Replies Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.