Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Local Domain computers cannot access internet. Anything else set to static can

    Scheduled Pinned Locked Moved DHCP and DNS
    3 Posts 2 Posters 587 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K
      KenGeo
      last edited by

      I tried to search this issue, but I'm certain i'm not using the correct terms.  Cannot figure out why the anything on the domain is not getting out to the internet.  Anything not on the domain can get out to the internet.

      I have a pfsense SG-4860

      WAN
      71.214.257.76
      255.255.255.252 (assigned) by ISP

      LAN
      192.168.1.2
      255.255.255.0
      192.168.1.0 subnet

      DHCP
      Range 192.168.1.75-192.168.1.254 for mobile devices, etc
      DNS: 192.168.1.4 / 192.168.1.3

      Server 2012 AD DHCP/DNS #1 Replication good to #2
      192.168.1.4 Static
      DNS 192.168.1.3 / 127.0.0.1

      Server 2012 AD DCHP/DNS #2 Replication good to #1
      192.168.1.3 Static
      DNS 192.168.1.4 / 127.0.0.1

      DNS on both servers point to:
      IPS DNS Server 1 lets just say 44.44.74.74
      ISP DNS Server 2 lets just say 44.44.75.75
      then 8.8.8.8 as backup

      1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator
        last edited by

        Well what are you lan rules?

        Are you allowing outbound for dns tcp and udp 53?

        Your clients point to your AD dns that forwards to your isp.. So if you AD dns can not get on the internet  what is there gateway.. Pfsense I would assume, and what are you Lan rules - by default they would be any any..  Can your dns servers directly query dns say your isp or google from nslookup or dig or whatever your fav dns tool is..

        example.

        C:>nslookup
        Default Server:  pfsense.local.lan
        Address:  192.168.9.253

        server 8.8.8.8
        Default Server:  google-public-dns-a.google.com
        Address:  8.8.8.8

        www.google.com
        Server:  google-public-dns-a.google.com
        Address:  8.8.8.8

        Non-authoritative answer:
        Name:    www.google.com
        Addresses:  2607:f8b0:4009:80f::2004
                  172.217.1.36

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        1 Reply Last reply Reply Quote 0
        • K
          KenGeo
          last edited by

          Your question about the gateway led me in the right direction.  I had not set the correct gateway on the DNS Server.  Silly oversight on my part.  Thanks for the tip off!

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.