Site to Site Domain forwarding packets not being sent

[ddbnj]

I have a multiwan setup with failover VPN site to site tunnels. DNS resolver is set up in forwarding mode. Everything is working on both sites except for domain overrides.

OSPF is running and providing routes. I can ping both DNS servers across the tunnels. If I search the hostname (FQDN) on the local DNS server, it works. When I try from the remote DNS server it times out. DNS resolver status confirms the domain override tunnel has timed out.

Packet capture for ports 53 and 853 do not show any packets being sent from the local pfsense server across the tunnel. Firewall rules for the tunnel are pass all.

Any idea why the local DNS resolver (unbound) isn't sending requests to my domain override?

Thanks,

Devan

[ddbnj]

@ddbnj

Confession: I had a floating rule messing up DNS forwarding.

Hope this helps anyone else.