client could not take dns ip from pfsense
-
Hi
I have recently installed a pfsense. i have dhcp in my network and dns with local dns ip address.ip have internet both through lan and wan interface.but clients in network can not access to the internet until i set google dns static on their network adapter.how can make pf sense give dns to the clients -
What do you mean with :
@vahedifar said in client could not take dns ip from pfsense:i have dhcp in my network
?
If pfSense is your DHCP server, set up a DNS address into the settings of the DHCP server - normally not needed if pfSense is also your network DNS.
-
@Gertjan
thanks
i have my own dhcp and dns in my domain.clients take ip and dns ip from my dhcp and dns in my local domain. -
@vahedifar said in client could not take dns ip from pfsense:
own dhcp and dns in my domain
Well : what does this DHCP hands over to your DHCP-Clients ?
( if Windows client : type "ipconfig /all" and you have your answer )
If not good, correct the settings of that DHCP server.
Keep in mind : a DHCP hands over an IP - the mask, the gateway, the NTP, the DNS, etc etc etc.Because your are not using pfSense , it not a "pfSense question", you probably have shut down the DHCP server.
-
no dhcp server is OK, if i want dhcp deliver public dns ip i should add 8.8.8.8 in dhcp scope but if clients get 8.8.8.8 for dns they can access internet but they cant access local hosts
-
Try using Packet Capture to see what's happening on the wire. Are the DNS requests going to the correct address? Is there a response?
-
@JKnott i used wireshrk for monitoring the packet received by local dns but it can not reply
-
Do you have DNS resolver or forwarder enabled?
-
actually my lan interface doesn't answer to clients dns query.i enabled dns resolver
-
Dns resolver is default enabled... Did you modify rules on your lan interface... What are you trying to resolve exactly? Can pfsense look up say www.google.com via diag, dns lookup?
Its possible upstream of pfsense blocks resolving, and you would have to forward..
-
yes it can resolve www.google.com
the main problem is when client in my local domain send request to the local dns server,local dns server can not send it to pfsense.pfsense can not respond to them -
@vahedifar said in client could not take dns ip from pfsense:
local dns server can not send it to pfsense.pfsense can not respond to them
Huh???
Your going to have to give some details of your setup
So pfsense is say 192.168.1.1
your client on this network is say 192.168.1.100
And you have some other dns on your network running on say 192.168.1.2 Or is it on some other vlan?Your client asks 192.168.1.2 for something, www.google.com, or some local fqdn this dns is authoritative for? Either way how is pfsense at all in evolved in the conversation exactly... Does your other dns forward to pfsense? Does it forward to say 8.8.8.8 or some outside dns, does it try and resolve on its own?
If you want help, your going to have to provide exact details of your setup... If you do not understand this setup yourself, how and the F are we suppose to guess to what your doing?
how can make pf sense give dns to the clients
Your original question is really just turn it on... Out of the box pfsense hands out its own IP to dhcp clients to point to it for dns, and out of the box it resolves... This is going to work like 99.9% of the time - only when pfsense can not resolve would this be an issue... Say on a satellite internet connection, or some Isp that blocks it, or something upstream that prevents it, etc.
Doesn't sound like this what your doing at all - so if your wanting to run your own local dns, and then do X with it, and have your clients ask it... Your going to have to give us some actual details... And then to be honest, has zero to actually do with pfsense. You have validated pfsense can resolve, so have a client directly query pfsense lan IP... Does it answer you... Then anything else your doing has nothing to do with pfsense.
-
i have inter vlan routing in my network,pfsense in a vlan A,servers such as dns ad and.. vlan B and clients in vlan C vlan D and...
no my dns does not forward to pfsens -
Yeah not helpful at all! Give no details what so ever..
If you want client in vlan X to talk to something in vlan Y... Then what are the rules on vlan X in pfsense? Does it allow dns? Are you policy routing and sending traffic out a gateway.
More than happy to help you, but I can not freaking guess to how you have shit setup... So give the details or your not going to get any help. Can not read minds, can not tell what the F your doing saying you are doing intervlan routing.. Where exactly on pfsense? You have some downstream router?
Draw up your network, provide your firewall rules. Show your setup for dns, where your clients point, where your dns is.. Does it even resolve? Are you just wanting clients to resolve your local AD..
Can not help you without info - sorry!
-
i have intervlan routing
i wrote statice wrote for each vlans and define gate way
rules for accessing subnets to internet
my clients resolve local ad but when they want access to internet thier request recived by local dns and local dns can not answer them because pfsense cannot answer to the query
i will draw network diagram -
@vahedifar said in client could not take dns ip from pfsense:
have intervlan routing
i wrote statice wrote for each vlans and define gate wayMaybe you should post in your native language section... Because this is going nowhere.. That is useless... I might as well ask you to fix my car, and when you ask me what is wrong I say its blue..
And when you ask what color I want it, I say well yeah it has 4 tires. But the color is fine.
