DNS unable to resolve domains that point to internal IP addresses

[fuckwit_mcbumcrumble]

I have a few public DNS records that point to internal IP addresses that resolve just fine on other networks.
But on my pfSense 2.7 device any DNS record that's an internal IP fails to resolve.

ex:

These domains resolve just fine on my home network using Google's routers and DNS servers.

Any idea what would be causing these DNS records to fail? Is there some setting that blocks these DNS records for whatever reason?

Some various settings:
cat /etc/resolv.conf
nameserver 127.0.0.1
nameserver 8.8.8.8
nameserver 8.8.4.4

General setup DNS Server Settings

DHCP server DNS settings

[johnpoz]

@fuckwit_mcbumcrumble if you forward, and it returns a rfc1918 address it would be a rebind.

https://docs.netgate.com/pfsense/en/latest/services/dns/rebinding.html#dns-rebinding-protections

It is not good practice to have public dns return a rfc1918 address.

If your going to forward to something and want unbound to return the rfc1918 to the client asking, you would need to setup the domain as private, or completely disable rebind protection - see the above link for details.

[fuckwit_mcbumcrumble]

@johnpoz Thanks! Disabling DNS Rebind Check fixed it.

[johnpoz]

@fuckwit_mcbumcrumble I would lean more towards just setting the domains you know are going to return rfc1918 as private vs disabling rebind completely.