<![CDATA[Cannot resolve local DNS Resolver from IPSec client]]>I've finally managed to setup an IPSec tunnel for my MacBook (Sierra) and PFSense. Configuration is as below in the screenshots.

Unfortunately I cannot resolve any DNS entries on the WAN/LAN when using my PFSense configured DNS resolver (192.168.1.1) as the DNS server provided to the IPSec Mobile Clients config page. If I use google's 8.8.8.8 / 8.8.4.4 the DNS resolves successfully and all traffic is routed through the PFSense IPSec server.

I can ping WAN IP addresses with either google or local DNS and I can successfully access the LAN with either configurations.

I am guessing its something super simple but I am lost as to what it might be!

Any help please?
![IPSec Mobile Config.jpg](/public/imported_attachments/1/IPSec Mobile Config.jpg)
![IPSec Mobile Config.jpg_thumb](/public/imported_attachments/1/IPSec Mobile Config.jpg_thumb)
![phase 2.jpg](/public/imported_attachments/1/phase 2.jpg)
![phase 2.jpg_thumb](/public/imported_attachments/1/phase 2.jpg_thumb)

]]>https://forum.netgate.com/topic/117380/cannot-resolve-local-dns-resolver-from-ipsec-clientRSS for NodeWed, 07 Oct 2026 15:46:37 GMTMon, 26 Jun 2017 21:17:52 GMT60<![CDATA[Reply to Cannot resolve local DNS Resolver from IPSec client on Wed, 19 Jul 2017 14:00:53 GMT]]>Hi, nevermind, I found the issue, some time ago I installed BIND, I think its conflicting. I stopped BIND and it works now. thanks.

]]>https://forum.netgate.com/post/712168https://forum.netgate.com/post/712168Wed, 19 Jul 2017 14:00:53 GMT<![CDATA[Reply to Cannot resolve local DNS Resolver from IPSec client on Tue, 18 Jul 2017 19:03:52 GMT]]>Hi, I ran into the same situation as you where my ipsec clients can't access the PFsense as the DNS.
I have successfully dished out the pfsense IP as the DNS to the clients, and the clients can ping it no problem.
But when trying to do a resolve I get Query refused:

nslookup yahoo.com 192.168.1.1
Server:  UnKnown
Address:  192.168.1.1
*** UnKnown can't find yahoo.com: Query refused

I had added the IPSEC /24 network to the DNS resolver access list, but still no luck. Is there anything else you have to do??

Much appreciated.

Thanks.

]]>https://forum.netgate.com/post/712051https://forum.netgate.com/post/712051Tue, 18 Jul 2017 19:03:52 GMT<![CDATA[Reply to Cannot resolve local DNS Resolver from IPSec client on Mon, 26 Jun 2017 21:54:44 GMT]]>Duh stupid me, had not added the IPSec addresses to the DNS resolver access list! Problem appears to be resolved.

]]>https://forum.netgate.com/post/708065https://forum.netgate.com/post/708065Mon, 26 Jun 2017 21:54:44 GMT