Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Internet on windows but not ubuntu bad pfsense configuration?

    Scheduled Pinned Locked Moved General pfSense Questions
    41 Posts 4 Posters 5.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • stephenw10S
      stephenw10 Netgate Administrator
      last edited by

      Check pfSense itself can resolve. Test something in Diag > DNS Lookup. Be sure all configured servers respond, that should include 127.0.0.1.

      Make sure both VMs appear in the pfSense DHCP lease table. You might have something else handing out leases.

      Steve

      1 Reply Last reply Reply Quote 0
      • F
        Farisse @Raffi_
        last edited by

        @Raffi_

        2eb42ba1-1715-4f55-bf57-a10fe653508d-image.png

        @stephenw10

        149f5d2b-90d5-4625-8b71-fa81da98d375-image.png

        Should the pfSense DHCP lease table show me the static ip from my vms ?

        Raffi_R 1 Reply Last reply Reply Quote 0
        • Raffi_R
          Raffi_
          last edited by

          Woaw 8 seconds for a query could be your issue. Those DNS servers are used only for this DMZ?

          b2ffc793-9b7b-4d3b-9b69-94409528d420-image.png

          DaddyGoD 1 Reply Last reply Reply Quote 1
          • F
            Farisse
            last edited by

            Nope those are DNS servers on my school's network. :/ Can not work without them

            Raffi_R 1 Reply Last reply Reply Quote 0
            • Raffi_R
              Raffi_ @Farisse
              last edited by Raffi_

              @Farisse said in Internet on windows but not ubuntu bad pfsense configuration?:

              Nope those are DNS servers on my school's network. :/ Can not work without them

              ...Can not work with them either.

              Edit
              Something is very wrong there. Even if your were to ping a server at the furthest possible point on the planet, I would not expect a number like that.

              1 Reply Last reply Reply Quote 0
              • F
                Farisse
                last edited by

                Haha got me ! But actually it work but only on windows VMs and not on Ubuntu. Idk if ubuntu is using different dns ports (not at my knowledge) Or if pfSense is sending the dns request to the wrong servers ?

                Raffi_R 1 Reply Last reply Reply Quote 0
                • Raffi_R
                  Raffi_ @Farisse
                  last edited by

                  @Farisse said in Internet on windows but not ubuntu bad pfsense configuration?:

                  Haha got me ! But actually it work but only on windows VMs and not on Ubuntu. Idk if ubuntu is using different dns ports (not at my knowledge) Or if pfSense is sending the dns request to the wrong servers ?

                  Could it be that Ubuntu's query timeout is shorter than Windows?

                  1 Reply Last reply Reply Quote 0
                  • Raffi_R
                    Raffi_
                    last edited by

                    I think using pfSense DNS resolver could help here since it would build up a cache.

                    676d0652-1ab4-445d-aaf7-8541847adbbe-image.png

                    3eee10ad-b053-4977-b3cd-44b5c2c0d520-image.png

                    1 Reply Last reply Reply Quote 0
                    • F
                      Farisse
                      last edited by

                      Idk, but when i restart the services i can get internet on my ubuntu.
                      So maybe my ubuntu is making a link with the dns servers when nothing can intercept the packets.
                      And if pfsense if running again it can't 'wipe' packets when the connection is established so ubuntu vm still have internet.
                      But when i restart the ubuntu vm every connection is closed and could not be established again.

                      This is what i guess but i don't know how to fix it by a port forwarding or traceroute can't determine where it sucks :/

                      1 Reply Last reply Reply Quote 0
                      • Raffi_R
                        Raffi_ @Farisse
                        last edited by

                        @Farisse said in Internet on windows but not ubuntu bad pfsense configuration?:

                        Should the pfSense DHCP lease table show me the static ip from my vms ?

                        Also, going back to @stephenw10 question on DHCP leases. That needs to be cleared up.

                        F 1 Reply Last reply Reply Quote 0
                        • F
                          Farisse @Raffi_
                          last edited by

                          @Raffi_ said in Internet on windows but not ubuntu bad pfsense configuration?:

                          That needs to be cleared up
                          ab03e6ef-f63e-4a24-965b-2c6d5d2510e0-image.png

                          I activated dns resolver with forwarding but still doesn't work.

                          I try it with Chrome and i receive this error:
                          6789f615-6acc-4bd2-b805-6d46109a08df-image.png

                          Raffi_R 1 Reply Last reply Reply Quote 0
                          • stephenw10S
                            stephenw10 Netgate Administrator
                            last edited by

                            Yeah that is catastrophically bad! Something is very broken there.

                            I guess the DNS timeout in Windows is higher which is why it worked.

                            You don't see localhost there so you probably have 'Do not use the DNS Forwarder/DNS Resolver as a DNS server for the firewall' set in System > General setup. That doesn't make much difference unless you have host overrides there the firewall should use.

                            Steve

                            Raffi_R F 2 Replies Last reply Reply Quote 0
                            • DaddyGoD
                              DaddyGo @Raffi_
                              last edited by

                              @Raffi_ said in Internet on windows but not ubuntu bad pfsense configuration?:

                              Woaw 8 seconds for a query could be your issue. Those DNS servers are used only for this DMZ?

                              I thought I would note this too, but I rather skipped it, hihihihhi 👍 😉

                              Cats bury it so they can't see it!
                              (You know what I mean if you have a cat)

                              1 Reply Last reply Reply Quote 1
                              • Raffi_R
                                Raffi_ @Farisse
                                last edited by

                                I activated dns resolver with forwarding but still doesn't work.

                                I try it with Chrome and i receive this error:
                                6789f615-6acc-4bd2-b805-6d46109a08df-image.png

                                Try it a second time. Once unbound caches it, it should come right up the second time.

                                1 Reply Last reply Reply Quote 0
                                • Raffi_R
                                  Raffi_ @stephenw10
                                  last edited by

                                  @stephenw10 said in Internet on windows but not ubuntu bad pfsense configuration?:

                                  You don't see localhost there so you probably have 'Do not use the DNS Forwarder/DNS Resolver as a DNS server for the firewall' set in System > General setup. That doesn't make much difference unless you have host overrides there the firewall should use.

                                  Steve

                                  Would dnsmaq use the local host as well or is that only the default for unbound?

                                  DaddyGoD 1 Reply Last reply Reply Quote 0
                                  • F
                                    Farisse @stephenw10
                                    last edited by Farisse

                                    @stephenw10 Its not after you told me i should probably have the localhost as respond i remembered i had in the beginning in general information the localhost and then not anymore. So i've add it back with the dns server (good or wrong way idk) But ly query is a lot faster now.
                                    9c593d97-30bd-4262-9b1c-0fda6f9bc8c3-image.png
                                    But the option "Do not use the DNS Forwarder/DNS Resolver as a DNS server for the firewall " is not set in.
                                    952c42a0-8e53-44fa-8e68-fb174493134d-image.png

                                    @Raffi_ I also tried it a second and third time, but no result. Or ... the same result.

                                    1 Reply Last reply Reply Quote 0
                                    • Raffi_R
                                      Raffi_
                                      last edited by Raffi_

                                      If you are using DNS resolver with forwarding mode, the first option will be the local host by default. There is no need to enter it again under DNS Server Settings in the General setup tab.

                                      Edit, something doesn't seem right with those 1ms query times. How would it go from 8 seconds to 1ms? I think this might be the DNS lookup GUI bug I've seen in the past.

                                      Run those dig commands from pfSense instead.
                                      Diagnostics/ Command Prompt
                                      dig @172.20.0.253 google.com
                                      dig @172.20.0.254 google.com

                                      I think those might give you the real results.

                                      F 1 Reply Last reply Reply Quote 0
                                      • DaddyGoD
                                        DaddyGo @Raffi_
                                        last edited by

                                        @Raffi_

                                        just an idea
                                        it would be worthwhile to look at and compare these:

                                        Windows: https://docs.microsoft.com/en-us/previous-versions//cc977482(v=technet.10)?redirectedfrom=MSDN

                                        Linux: /etc/resolv.conf

                                        search domain.net
                                        option timeout:1
                                        nameserver 1.1.1.1
                                        nameserver 2.2.2.2
                                        nameserver 3.3.3.3

                                        or something like that

                                        Cats bury it so they can't see it!
                                        (You know what I mean if you have a cat)

                                        1 Reply Last reply Reply Quote 0
                                        • F
                                          Farisse @Raffi_
                                          last edited by

                                          @Raffi_
                                          b958cd9d-7c01-48ee-9d97-6ea2e1a68972-image.png 710c96f0-0f10-41a3-8146-01e4c9b6f1cd-image.png

                                          I removed the localhost from the general setting and these are the results

                                          @DaddyGo It was a good suggestion, but unfortunately /etc/resolv.conf is managed by systemd-resolved who is used by netplan /etc/netplan/*.yaml

                                          1 Reply Last reply Reply Quote 0
                                          • Raffi_R
                                            Raffi_
                                            last edited by Raffi_

                                            Interesting, well the two DNS servers seem to be responding better now. That could also be because they are caching.

                                            How is Ubuntu getting its interface settings? Is it statically assigned in Ubuntu or is it set to automatic (DHCP)? There were no leases in your DHCP list.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.