Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    client could not take dns ip from pfsense

    DHCP and DNS
    4
    16
    199
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • V
      vahedifar last edited by vahedifar

      Hi
      I have recently installed a pfsense. i have dhcp in my network and dns with local dns ip address.ip have internet both through lan and wan interface.but clients in network can not access to the internet until i set google dns static on their network adapter.how can make pf sense give dns to the clients

      Gertjan 1 Reply Last reply Reply Quote 0
      • Gertjan
        Gertjan @vahedifar last edited by Gertjan

        What do you mean with :
        @vahedifar said in client could not take dns ip from pfsense:

        i have dhcp in my network

        ?

        If pfSense is your DHCP server, set up a DNS address into the settings of the DHCP server - normally not needed if pfSense is also your network DNS.

        No "help me" PM's please. Use the forum.

        V 1 Reply Last reply Reply Quote 0
        • V
          vahedifar @Gertjan last edited by

          @Gertjan
          thanks
          i have my own dhcp and dns in my domain.clients take ip and dns ip from my dhcp and dns in my local domain.

          Gertjan 1 Reply Last reply Reply Quote 0
          • Gertjan
            Gertjan @vahedifar last edited by

            @vahedifar said in client could not take dns ip from pfsense:

            own dhcp and dns in my domain

            Well : what does this DHCP hands over to your DHCP-Clients ?
            ( if Windows client : type "ipconfig /all" and you have your answer )
            If not good, correct the settings of that DHCP server.
            Keep in mind : a DHCP hands over an IP - the mask, the gateway, the NTP, the DNS, etc etc etc.

            Because your are not using pfSense , it not a "pfSense question", you probably have shut down the DHCP server.

            No "help me" PM's please. Use the forum.

            1 Reply Last reply Reply Quote 0
            • V
              vahedifar last edited by

              no dhcp server is OK, if i want dhcp deliver public dns ip i should add 8.8.8.8 in dhcp scope but if clients get 8.8.8.8 for dns they can access internet but they cant access local hosts

              JKnott 1 Reply Last reply Reply Quote 0
              • JKnott
                JKnott @vahedifar last edited by

                @vahedifar

                Try using Packet Capture to see what's happening on the wire. Are the DNS requests going to the correct address? Is there a response?

                PfSense running on Qotom mini PC
                i5 CPU, 4 GB memory, 64 GB SSD & 4 Intel Gb Ethernet ports.
                UniFi AC-Lite access point

                I haven't lost my mind. It's around here...somewhere...

                V 1 Reply Last reply Reply Quote 0
                • V
                  vahedifar @JKnott last edited by

                  @JKnott i used wireshrk for monitoring the packet received by local dns but it can not reply

                  JKnott 1 Reply Last reply Reply Quote 0
                  • JKnott
                    JKnott @vahedifar last edited by

                    @vahedifar

                    Do you have DNS resolver or forwarder enabled?

                    PfSense running on Qotom mini PC
                    i5 CPU, 4 GB memory, 64 GB SSD & 4 Intel Gb Ethernet ports.
                    UniFi AC-Lite access point

                    I haven't lost my mind. It's around here...somewhere...

                    1 Reply Last reply Reply Quote 0
                    • V
                      vahedifar last edited by

                      actually my lan interface doesn't answer to clients dns query.i enabled dns resolver

                      1 Reply Last reply Reply Quote 0
                      • johnpoz
                        johnpoz LAYER 8 Global Moderator last edited by

                        Dns resolver is default enabled... Did you modify rules on your lan interface... What are you trying to resolve exactly? Can pfsense look up say www.google.com via diag, dns lookup?

                        Its possible upstream of pfsense blocks resolving, and you would have to forward..

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        2440 2.4.5p1 | 2x 3100 2.4.4p3 | 2x 3100 22.01 | 4860 22.01

                        1 Reply Last reply Reply Quote 0
                        • V
                          vahedifar last edited by

                          yes it can resolve www.google.com
                          the main problem is when client in my local domain send request to the local dns server,local dns server can not send it to pfsense.pfsense can not respond to them

                          1 Reply Last reply Reply Quote 0
                          • johnpoz
                            johnpoz LAYER 8 Global Moderator last edited by johnpoz

                            @vahedifar said in client could not take dns ip from pfsense:

                            local dns server can not send it to pfsense.pfsense can not respond to them

                            Huh???

                            Your going to have to give some details of your setup

                            So pfsense is say 192.168.1.1
                            your client on this network is say 192.168.1.100
                            And you have some other dns on your network running on say 192.168.1.2 Or is it on some other vlan?

                            Your client asks 192.168.1.2 for something, www.google.com, or some local fqdn this dns is authoritative for? Either way how is pfsense at all in evolved in the conversation exactly... Does your other dns forward to pfsense? Does it forward to say 8.8.8.8 or some outside dns, does it try and resolve on its own?

                            If you want help, your going to have to provide exact details of your setup... If you do not understand this setup yourself, how and the F are we suppose to guess to what your doing?

                            how can make pf sense give dns to the clients

                            Your original question is really just turn it on... Out of the box pfsense hands out its own IP to dhcp clients to point to it for dns, and out of the box it resolves... This is going to work like 99.9% of the time - only when pfsense can not resolve would this be an issue... Say on a satellite internet connection, or some Isp that blocks it, or something upstream that prevents it, etc.

                            Doesn't sound like this what your doing at all - so if your wanting to run your own local dns, and then do X with it, and have your clients ask it... Your going to have to give us some actual details... And then to be honest, has zero to actually do with pfsense. You have validated pfsense can resolve, so have a client directly query pfsense lan IP... Does it answer you... Then anything else your doing has nothing to do with pfsense.

                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                            If you get confused: Listen to the Music Play
                            Please don't Chat/PM me for help, unless mod related
                            2440 2.4.5p1 | 2x 3100 2.4.4p3 | 2x 3100 22.01 | 4860 22.01

                            1 Reply Last reply Reply Quote 0
                            • V
                              vahedifar last edited by

                              i have inter vlan routing in my network,pfsense in a vlan A,servers such as dns ad and.. vlan B and clients in vlan C vlan D and...
                              no my dns does not forward to pfsens

                              1 Reply Last reply Reply Quote 0
                              • johnpoz
                                johnpoz LAYER 8 Global Moderator last edited by

                                Yeah not helpful at all! Give no details what so ever..

                                If you want client in vlan X to talk to something in vlan Y... Then what are the rules on vlan X in pfsense? Does it allow dns? Are you policy routing and sending traffic out a gateway.

                                More than happy to help you, but I can not freaking guess to how you have shit setup... So give the details or your not going to get any help. Can not read minds, can not tell what the F your doing saying you are doing intervlan routing.. Where exactly on pfsense? You have some downstream router?

                                Draw up your network, provide your firewall rules. Show your setup for dns, where your clients point, where your dns is.. Does it even resolve? Are you just wanting clients to resolve your local AD..

                                Can not help you without info - sorry!

                                An intelligent man is sometimes forced to be drunk to spend time with his fools
                                If you get confused: Listen to the Music Play
                                Please don't Chat/PM me for help, unless mod related
                                2440 2.4.5p1 | 2x 3100 2.4.4p3 | 2x 3100 22.01 | 4860 22.01

                                1 Reply Last reply Reply Quote 0
                                • V
                                  vahedifar last edited by

                                  i have intervlan routing
                                  i wrote statice wrote for each vlans and define gate way
                                  rules for accessing subnets to internet
                                  my clients resolve local ad but when they want access to internet thier request recived by local dns and local dns can not answer them because pfsense cannot answer to the query
                                  i will draw network diagram

                                  1 Reply Last reply Reply Quote 0
                                  • johnpoz
                                    johnpoz LAYER 8 Global Moderator last edited by johnpoz

                                    @vahedifar said in client could not take dns ip from pfsense:

                                    have intervlan routing
                                    i wrote statice wrote for each vlans and define gate way

                                    Maybe you should post in your native language section... Because this is going nowhere.. That is useless... I might as well ask you to fix my car, and when you ask me what is wrong I say its blue..

                                    And when you ask what color I want it, I say well yeah it has 4 tires. But the color is fine.

                                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                                    If you get confused: Listen to the Music Play
                                    Please don't Chat/PM me for help, unless mod related
                                    2440 2.4.5p1 | 2x 3100 2.4.4p3 | 2x 3100 22.01 | 4860 22.01

                                    1 Reply Last reply Reply Quote 0
                                    • First post
                                      Last post