DNS
-
Hello everyone.On my pfSense box I'm trying to setup 2 networks 10.8.0.1 and 10.1.0.1.Our company domain let's say is internal.company.com.So on my local machine I have configured my laptop to have the default gateway as 10.8.0.1 and also the DNS Server 10.8.0.1 and the DNS Suffix internal.company.com.When I try with nslookup on cmd It cannot pass traffic to 10.1.0.1 ,but when i try on my browser I can access all the traffic that is coming through 10.1.0.1.Is there any setting on the pfsense firewall that triggers that?
-
When I try with nslookup on cmd It cannot pass traffic to 10.1.0.1
If your IP = 10.8.0.x (where x is between 2 and 254), this is the device you use to run nslookup,
and your gateway is 10.8.0.1 and DNS is 10.8.0.1 - where 10.8.0.1 = pfSense
then nslookup doesn't "pass" any traffic to 10.1.0.1. It contacts 10.8.0.1. It will not contact something on 10.1.0.x - it will ask the DNS (server) on 10.8.0.1 and that's it.If you want traffic to be able to flow (route) from 10.8.0.x to 10.1.0.y, then add a firewall rule on the 10.8.0.x network firewall page that allow this traffic.
If 10.8.0.1 is your LAN, then the default firewall rule that you found there after installation would allow this traffic. -
When I try with nslookup on cmd It cannot pass traffic to 10.1.0.1
Are you saying this box can not lookup fqdn in your internal.company.com?
How would pfsense know what dns to ask for these records. If you want pfsense to lookup something off an internal dns, you would need to setup a domain override to tell unbound where to go ask.
