DNS queries trough ipsec

[nikkopegmail.com]

Hi.

I have a configuration where "local" dns is behind an ipsec tunnel.
So the clients asks names from a dns server which is located in headquarter premises over the ipsec and this works fine.
However - there's a lot of queries so I would like to set the netgate as resolver.

How could I redirect the DNS queries coming from Netgate it self to go out trough the ipsec tunnel, since as default they are going out trough wan.

Thanks in advance.

/br, pete

[kiokoman]

maybe this could be of help
https://docs.netgate.com/pfsense/en/latest/vpn/ipsec/accessing-firewall-services-over-ipsec-vpns.html
https://forum.netgate.com/topic/103395/dns-server-domain-override-over-ipsec-vpn-not-working

[nikkopegmail.com]

Thanks Manuel !

This was just what I was looking for.
At least, when tried from the firewall, it worked (127.0.0.1 and LAN gw answered after the change). I will visit the customer and double check it from the workstation but pretty sure that this was the solution.

Appreciate Your help.

/ best regards, pete