domain override not working

rasithapr

Im trying get domain override to work. I have my ms domain at ip 192.168.151.3 but things not working. But it started to work when i turned off pfsense firewall. What am i missing here do i need to put a firewall rule. Ill attach a picture for my rules alt text

johnpoz

@rasithapr lets go over different steps in validation that your override can/will work, this might help us figure out where its going wrong.

If you have dns setup on 192.168.151.3 that resolves lets call it mydomain.tld, so I setup a domain override for this..

I pointed it to nameserver I have on my network on 192.168.9.10

I can validate that is where unbound will ask via

unbound-control -c /var/unbound/unbound.conf lookup host.mydomain.tld

I can look in unbound.conf that it set this domain as private - so it can return rf1918 address

You can view your unbound.conf in /var/unbound

I validated that my ns on 192.168.9.10 actually resolves a record looking for.. that dig @192.168.9.10 for host.mydomain.tld you can see it returned 192.168.9.42 which is the A record I set in that ns.

I validate that pfsense can indeed resolve that fqdn in dns lookup under diagnostics.

And last you can see that if I ask unbound on pfsense IP of 192.168.9.253 I get the response.

So you will want to make sure unbound treats this domain as private if its going to return rfc1918 addresses. You will also want to make sure that unbound is set to use an interface that can talk to that ns on for outgoing interfaces.

If you have changed it from the default all setting.

rasithapr

@johnpoz i changed the outgoing interface to all & now its working it was set to wan previously

johnpoz

@rasithapr I like using localhost personally, it will nat when goes out the wan. But locallhost isn't going to work for a domain override to a NS on your local networks ;)

Glad you got it sorted.