Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    client could not take dns ip from pfsense

    DHCP and DNS
    4
    16
    115
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • V
      vahedifar last edited by vahedifar

      Hi
      I have recently installed a pfsense. i have dhcp in my network and dns with local dns ip address.ip have internet both through lan and wan interface.but clients in network can not access to the internet until i set google dns static on their network adapter.how can make pf sense give dns to the clients

      Gertjan 1 Reply Last reply Reply Quote 0
      • Gertjan
        Gertjan @vahedifar last edited by Gertjan

        What do you mean with :
        @vahedifar said in client could not take dns ip from pfsense:

        i have dhcp in my network

        ?

        If pfSense is your DHCP server, set up a DNS address into the settings of the DHCP server - normally not needed if pfSense is also your network DNS.

        V 1 Reply Last reply Reply Quote 0
        • V
          vahedifar @Gertjan last edited by

          @Gertjan
          thanks
          i have my own dhcp and dns in my domain.clients take ip and dns ip from my dhcp and dns in my local domain.

          Gertjan 1 Reply Last reply Reply Quote 0
          • Gertjan
            Gertjan @vahedifar last edited by

            @vahedifar said in client could not take dns ip from pfsense:

            own dhcp and dns in my domain

            Well : what does this DHCP hands over to your DHCP-Clients ?
            ( if Windows client : type "ipconfig /all" and you have your answer )
            If not good, correct the settings of that DHCP server.
            Keep in mind : a DHCP hands over an IP - the mask, the gateway, the NTP, the DNS, etc etc etc.

            Because your are not using pfSense , it not a "pfSense question", you probably have shut down the DHCP server.

            1 Reply Last reply Reply Quote 0
            • V
              vahedifar last edited by

              no dhcp server is OK, if i want dhcp deliver public dns ip i should add 8.8.8.8 in dhcp scope but if clients get 8.8.8.8 for dns they can access internet but they cant access local hosts

              JKnott 1 Reply Last reply Reply Quote 0
              • JKnott
                JKnott @vahedifar last edited by

                @vahedifar

                Try using Packet Capture to see what's happening on the wire. Are the DNS requests going to the correct address? Is there a response?

                V 1 Reply Last reply Reply Quote 0
                • V
                  vahedifar @JKnott last edited by

                  @JKnott i used wireshrk for monitoring the packet received by local dns but it can not reply

                  JKnott 1 Reply Last reply Reply Quote 0
                  • JKnott
                    JKnott @vahedifar last edited by

                    @vahedifar

                    Do you have DNS resolver or forwarder enabled?

                    1 Reply Last reply Reply Quote 0
                    • V
                      vahedifar last edited by

                      actually my lan interface doesn't answer to clients dns query.i enabled dns resolver

                      1 Reply Last reply Reply Quote 0
                      • johnpoz
                        johnpoz LAYER 8 Global Moderator last edited by

                        Dns resolver is default enabled... Did you modify rules on your lan interface... What are you trying to resolve exactly? Can pfsense look up say www.google.com via diag, dns lookup?

                        Its possible upstream of pfsense blocks resolving, and you would have to forward..

                        1 Reply Last reply Reply Quote 0
                        • V
                          vahedifar last edited by

                          yes it can resolve www.google.com
                          the main problem is when client in my local domain send request to the local dns server,local dns server can not send it to pfsense.pfsense can not respond to them

                          1 Reply Last reply Reply Quote 0
                          • johnpoz
                            johnpoz LAYER 8 Global Moderator last edited by johnpoz

                            @vahedifar said in client could not take dns ip from pfsense:

                            local dns server can not send it to pfsense.pfsense can not respond to them

                            Huh???

                            Your going to have to give some details of your setup

                            So pfsense is say 192.168.1.1
                            your client on this network is say 192.168.1.100
                            And you have some other dns on your network running on say 192.168.1.2 Or is it on some other vlan?

                            Your client asks 192.168.1.2 for something, www.google.com, or some local fqdn this dns is authoritative for? Either way how is pfsense at all in evolved in the conversation exactly... Does your other dns forward to pfsense? Does it forward to say 8.8.8.8 or some outside dns, does it try and resolve on its own?

                            If you want help, your going to have to provide exact details of your setup... If you do not understand this setup yourself, how and the F are we suppose to guess to what your doing?

                            how can make pf sense give dns to the clients

                            Your original question is really just turn it on... Out of the box pfsense hands out its own IP to dhcp clients to point to it for dns, and out of the box it resolves... This is going to work like 99.9% of the time - only when pfsense can not resolve would this be an issue... Say on a satellite internet connection, or some Isp that blocks it, or something upstream that prevents it, etc.

                            Doesn't sound like this what your doing at all - so if your wanting to run your own local dns, and then do X with it, and have your clients ask it... Your going to have to give us some actual details... And then to be honest, has zero to actually do with pfsense. You have validated pfsense can resolve, so have a client directly query pfsense lan IP... Does it answer you... Then anything else your doing has nothing to do with pfsense.

                            1 Reply Last reply Reply Quote 0
                            • V
                              vahedifar last edited by

                              i have inter vlan routing in my network,pfsense in a vlan A,servers such as dns ad and.. vlan B and clients in vlan C vlan D and...
                              no my dns does not forward to pfsens

                              1 Reply Last reply Reply Quote 0
                              • johnpoz
                                johnpoz LAYER 8 Global Moderator last edited by

                                Yeah not helpful at all! Give no details what so ever..

                                If you want client in vlan X to talk to something in vlan Y... Then what are the rules on vlan X in pfsense? Does it allow dns? Are you policy routing and sending traffic out a gateway.

                                More than happy to help you, but I can not freaking guess to how you have shit setup... So give the details or your not going to get any help. Can not read minds, can not tell what the F your doing saying you are doing intervlan routing.. Where exactly on pfsense? You have some downstream router?

                                Draw up your network, provide your firewall rules. Show your setup for dns, where your clients point, where your dns is.. Does it even resolve? Are you just wanting clients to resolve your local AD..

                                Can not help you without info - sorry!

                                1 Reply Last reply Reply Quote 0
                                • V
                                  vahedifar last edited by

                                  i have intervlan routing
                                  i wrote statice wrote for each vlans and define gate way
                                  rules for accessing subnets to internet
                                  my clients resolve local ad but when they want access to internet thier request recived by local dns and local dns can not answer them because pfsense cannot answer to the query
                                  i will draw network diagram

                                  1 Reply Last reply Reply Quote 0
                                  • johnpoz
                                    johnpoz LAYER 8 Global Moderator last edited by johnpoz

                                    @vahedifar said in client could not take dns ip from pfsense:

                                    have intervlan routing
                                    i wrote statice wrote for each vlans and define gate way

                                    Maybe you should post in your native language section... Because this is going nowhere.. That is useless... I might as well ask you to fix my car, and when you ask me what is wrong I say its blue..

                                    And when you ask what color I want it, I say well yeah it has 4 tires. But the color is fine.

                                    1 Reply Last reply Reply Quote 0
                                    • First post
                                      Last post

                                    Products

                                    • Platform Overview
                                    • TNSR
                                    • pfSense Plus
                                    • Appliances

                                    Services

                                    • Training
                                    • Professional Services

                                    Support

                                    • Subscription Plans
                                    • Contact Support
                                    • Product Lifecycle
                                    • Documentation

                                    News

                                    • Media Coverage
                                    • Press
                                    • Events

                                    Resources

                                    • Blog
                                    • FAQ
                                    • Find a Partner
                                    • Resource Library
                                    • Security Information

                                    Company

                                    • About Us
                                    • Careers
                                    • Partners
                                    • Contact Us
                                    • Legal
                                    Our Mission

                                    We provide leading-edge network security at a fair price - regardless of organizational size or network sophistication. We believe that an open-source security model offers disruptive pricing along with the agility required to quickly address emerging threats.

                                    Subscribe to our Newsletter

                                    Product information, software announcements, and special offers. See our newsletter archive to sign up for future newsletters and to read past announcements.

                                    © 2021 Rubicon Communications, LLC | Privacy Policy