Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Can't get Bind subzone forward working

    Scheduled Pinned Locked Moved DHCP and DNS
    bind dnsforwarding
    1 Posts 1 Posters 553 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      jacotec
      last edited by

      Hi,

      I'm using my pfSense as my primary NS with the Bind package. All works great, including the ACME certificates using it. My Bind listens on port 53 on my WAN IP and internally on 10.0.0.5.

      I want to run my own DDNS server mainly for family and friends, so I've set up a VM with PyDDNS which works great for itself. Unfortunately I'm struggling for hours with forwarding a subdomain to it in pfSense/Bind.

      My PyDDNS has the internal IP 10.0.1.52. As I have only one WAN IP I need to forward a subdomain internally. So I've created two Zones in pfSense/Bind:

      • Primary master zone "mydns.de" with two slave DNS (needed for the domain) like all my other zones
      • Subdomain zone "ddns.mydns.de" as type "forward" with the forwarder IP 10.0.1.52 (my PyDDNS handling all the DynDNS entries).

      I've created the DynDNS entry "test.ddns.mydns.de" in PyDDNS.

      dig @10.0.1.52 A test.ddns.mydns.de gives back the correct IP address. So PyDNS works fine.

      dig @10.0.0.5 A mydns.de returns correctly my WAN IP address (the main zone in Bind)

      But dig @10.0.0.5 A test.ddns.mydns.de does not return an entry. I would expect that Bind forwards all queries to ddns.mydns.de to my pyDDNS 10.0.1.52 as this is declared as the forwarder for this zone. But it does not.

      Dumping port 53 of my PyDDNS shows me that not even a simple query is done by pfSense/Bind to it.

      What is wrong? Issue in pfSense/Bind or issue sitting in front of my keyboard? ;-)

      1 Reply Last reply Reply Quote 0
      • First post
        Last post
      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.