Migration of pfSense and DNS issue



  • I have migrated my old pfSense 2.2 to a new 2.4. Quite on the same hardware (Alix).
    For that, I installed the new one with a fresh install, I exported the old configuration (Backup) and imported it on the new (Restore). I reassigned the interfaces to the good one and the new firewall is connected to the net. At this exact point, I have excatly the same rules on the old and the new.
    All seems fine on the new one, except I do not have any connection between inside and outside.
    After some tests, I realised the issue could be in the DNS names' resolution.
    If I ping 8.8.8.8 from inside, it is fine. Ping responds. But if I do ping www.google.com, I do not have any response : «From _gateway (192.168.0.1) icmp_seq=776 Destination Host Unreachable»

    If I try the same thing from the diagnostics/Traceroute, I have the resolution from WAN, but not from localhost or LAN.

    Do you know what could be wrong or how to find where it is wrong ?

    Many thanks.



  • OK, here some updates :
    The DNS is OK. ping www.google.ch or fr.wikipedia.org resolves the name, but the IP address is unreachable.
    But IPv6 address seems OK from LAN (but not from localhost). I changed the DNS servers (to be sure), but nothing changed.
    I disabled the firewall (pfctl -d), nothing works, as expected.

    I do not see any rules which could explain why IPv6 works and IPv4 does not.
    Any idea ?



  • Problem solved : It was the default gateway for IPv4. It was using the IPv6 gateway.
    I think the new version applies a more strict policy.
    ;)


Log in to reply