Not authorized to do DNS requests on other networks

[thunder8911]

Hello everyone,

We have been Lately testing out PfSense's DNS-Server in order to replace our
existing one, where we have been facing some issues, wich are the following:

Our Network is based on the following structure:

(..internet-stuff..)
-> Firewall (192.168.xx.xx)
-> Gateway
 +> Network 192.168.xx.xx (Basement)
 +> Network 192.168.yy.xx (1st Level)
 +> Network 192.168.zz.xx (DMZ)

The Firewall function works fine for us, we have even been able to put 2 WAN
interfaces up, so we're having a redundant connection, but the DNS keeps bugging us.

Network 192.168.xx.xx is allowed to send DNS-Requests, everything works fine,
so that we are not facing any problems down here.

All the Networks (Except Wan of course) are connected to one NIC, wich has
(for testing purposes) Allow * from * to * so that nothing can get in the way.

Other than that, 192.168.yy.xx and zz.xx are not allowed to request a DNS resolving.
Any certain setting that has to be made? Or is it impossible to allow DNS requests
from other Networks than the own?

Thanks for your help in advance.

Kind regards,
Stefan