DNS question
-
Hi,
I have set DNS 1.1.1.2 / 1.0.0.2 in System/General Setup. I was under the impression that these were to be given to DHCP clients if no additional DNS were specified in the DHCP Server for a particular vlan, and DNS Resolver was activated? This did not work for me, there may of course be some very valid reasons for that, but to make things (Netflix) work, I had to specify the DNS's in the DHCP server part as well. Is this how it is supposed to be setup/work in pfSense?
Wanted scenario is to resolve locally first, if that fails, use upstream (which is the ones in General Setup, right?), except for a few networks that shall be local only (like IoT, NoT). I thought I had that, but perhaps not...
-
@furom its like we go over this every other day ;)
Out of the box pfsense is a resolver - what you put in general be it manually or via dhcp from your isp has zero to do with clients asking unbound running on pfsense.
Unless you enable forwarder mode in unbound, what is in general only would ever be used by pfsense trying to say check for updates, or checking if a IP resolve in your firewall log when you click the little button to resolver it. Or using the diagnostic menu to do a dns lookup.
Out of the box dhcp server would hand dhcp clients the IP of pfsense on the interface your running the dhcp server.
Out of the box pfsense should ask itself (unbound) via loopback to resolve what your asking for. If that fails to answer, then pfsense would ask other dns in its general settings. But this would never have anything to do with clients on your network.
If you do not actually understand what a resolver vs a forwarder is - then yeah this is prob pretty confusing.
A resolver (default config of unbound) asks roots, and then the gtds ns it gets from roots for the authoritative ns for whatever domain your fqdn is in your looking to resolve. Then specifically asks the NS for that domain for whatever.domain.tld your looking for.
A forwarder just asks where you forward to do that for you..
-
@johnpoz
I do appreciate you explaining this though. I am reading the docs and a lot of other sources to get this setup the way I need and perhaps are confusing myself a bit in the process, but will try harder to sort things.
Thanks -
@furom, I CAN HELP YOU with whatever you need, just tell me we are here to serve you sir.
