reverse resolve with DNS on Status/Dashboard



  • Hihi

    On my PF-sense dashboard,Firewall logs, there are a lot of messages popping up (see image) "Reverse Resolve with DNS." Every minute.
    Where from is this coming? Is this slowing down my network? How can i Fix this?

    Running is an AD-environment with DHCP server.

    If you need more info, let me know!

    Thanks in advance.

    3f6cb09b-6627-4d9e-8bb3-4253f8986b71-image.png



  • Hi,

    @Qawereer said in reverse resolve with DNS on Status/Dashboard:

    Where from is this coming?

    Can't tell - it''s hidden behind the black ink. I guess you should know ...
    I tend to say : some device on your LAN ....

    @Qawereer said in reverse resolve with DNS on Status/Dashboard:

    Is this slowing down my network?

    You have a marvelous device called pfSense that can help you answering that question.
    IMHO : no.

    @Qawereer said in reverse resolve with DNS on Status/Dashboard:

    How can i Fix this?

    That's not a question. Your are the admin : you decide.
    You have the IP .... so you could nail down this device : make a firewall rule that blocks that IP, the owner will show up fast (or switches over to IPv4 ^^, you will block that also, etc.)



  • HiHi

    I am new to Pfsense 😭 So please tell me more 🙏
    It's not one IP; there are different ones. The other thing is it's not only IPv6 also some IPv4 addresses.



  • You see the destination IP ?
    It's ff02::fb

    Google will tell you what it is (so now you know : harmless).

    If needed : hunt down that device that is making these requests, shut it down / tip out the network cable :=> problem solved.
    Or : do not log these inoffensive requests.


Log in to reply