Firewall/Aliases add host by FQDN not work

[jason04131015]

Hello,

I added an alias named "Test" and the type is Host(s).
Then I add a Rule to let the alias pass.

But it worked if alias enter IP, but not work if alias enter FQDN.

Please help me, thanks.

[Gertjan]

That one, and FB, and twitter, CNN, Snapchats, Youtube, etc etc etc, all those that have thousands of IP's 'behind' an URL, you can not use them.
Their IP can - and do - change every hour, minute, or even a second.

edit : That said :

I set up this :

and then I tested my "test1_IP" :

works just fine.
Knowing that the IPv4 and IPv6 is just one of ... many.

So .... your DNS is 'broken' ? :

[jason04131015]

Hi,@Gertjan
Thanks for your reply.

I tried to set like this:

Type URL "google.com" not work.

Then set up IP "172.217.160.100" from firewall log entries.

It worked when I type "google.com"

Then I set back like step 1. It's still work when I type "google.com".

Is this DNS broken?
My DNS is 10.24.10.1 (local DNS).

Thank you.

[Gertjan]

@jason04131015 said in Firewall/Aliases add host by FQDN not work:

Type URL "google.com" not work.

Typing where ? Your PC ?
At that moment, your PC had probably cached another IP for Google.com - not the same one pfSense was using.
As said, google.com has thousands of IP's, not just one.

[jason04131015]

@Gertjan said in Firewall/Aliases add host by FQDN not work:

Typing where ? Your PC ?
At that moment, your PC had probably cached another IP for Google.com - not the same one pfSense was using.
As said, google.com has thousands of IP's, not just one.

Hi @Gertjan
Thanks for your reply.

Yes.Typing URL on my PC.(IP:10.24.10.2)

I can ping "google.com".But I cannot display the webpage by entering the URL on the browser.
How can I check if my dns is broken or not?

Thank you.