Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    reverse resolve with DNS on Status/Dashboard

    Scheduled Pinned Locked Moved DHCP and DNS
    4 Posts 2 Posters 426 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • Q
      Qawereer
      last edited by

      Hihi

      On my PF-sense dashboard,Firewall logs, there are a lot of messages popping up (see image) "Reverse Resolve with DNS." Every minute.
      Where from is this coming? Is this slowing down my network? How can i Fix this?

      Running is an AD-environment with DHCP server.

      If you need more info, let me know!

      Thanks in advance.

      3f6cb09b-6627-4d9e-8bb3-4253f8986b71-image.png

      GertjanG 1 Reply Last reply Reply Quote 0
      • GertjanG
        Gertjan @Qawereer
        last edited by

        Hi,

        @Qawereer said in reverse resolve with DNS on Status/Dashboard:

        Where from is this coming?

        Can't tell - it''s hidden behind the black ink. I guess you should know ...
        I tend to say : some device on your LAN ....

        @Qawereer said in reverse resolve with DNS on Status/Dashboard:

        Is this slowing down my network?

        You have a marvelous device called pfSense that can help you answering that question.
        IMHO : no.

        @Qawereer said in reverse resolve with DNS on Status/Dashboard:

        How can i Fix this?

        That's not a question. Your are the admin : you decide.
        You have the IP .... so you could nail down this device : make a firewall rule that blocks that IP, the owner will show up fast (or switches over to IPv4 ^^, you will block that also, etc.)

        No "help me" PM's please. Use the forum, the community will thank you.
        Edit : and where are the logs ??

        1 Reply Last reply Reply Quote 0
        • Q
          Qawereer
          last edited by

          HiHi

          I am new to Pfsense 😭 So please tell me more 🙏
          It's not one IP; there are different ones. The other thing is it's not only IPv6 also some IPv4 addresses.

          1 Reply Last reply Reply Quote 0
          • GertjanG
            Gertjan
            last edited by

            You see the destination IP ?
            It's ff02::fb

            Google will tell you what it is (so now you know : harmless).

            If needed : hunt down that device that is making these requests, shut it down / tip out the network cable :=> problem solved.
            Or : do not log these inoffensive requests.

            No "help me" PM's please. Use the forum, the community will thank you.
            Edit : and where are the logs ??

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.