Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Removal of LAGG

    Scheduled Pinned Locked Moved General pfSense Questions
    41 Posts 3 Posters 2.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      stevencavanagh @stephenw10
      last edited by

      @stephenw10 Yes, they are all connected and all at tier 1

      1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        Hmm, well I would expect to see traffic on all of them then. One thing that often causes issues in this sort of setup though is when the VPN provider uses the same gateway IP for multiple servers. In that situation pf can only route to one of them.

        S 1 Reply Last reply Reply Quote 0
        • S
          stevencavanagh @stephenw10
          last edited by

          @stephenw10

          Yes, that's a problem with Nordvpn, which is why I also use PIA also. Consequently, I have only one instance of Nordvpn and the rest are PIA, which have different gateways

          S 1 Reply Last reply Reply Quote 1
          • S
            stevencavanagh @stevencavanagh
            last edited by

            @stevencavanagh

            One issue I have found but may not be related to VPNs is that on running a DNS leak test, I find my ISPs external WAN ip address alongside the VPNs public ip address. The dashboard shows the only DNS server as 127.0.0.1, which I believe is correct as I am using DND resolver. Had a look around the forum at the many posts but yet to find a cause or solution!

            1 Reply Last reply Reply Quote 0
            • stephenw10S
              stephenw10 Netgate Administrator
              last edited by

              How is Unbound configured? How is DNS set in System General Setup?

              S 1 Reply Last reply Reply Quote 0
              • S
                stevencavanagh @stephenw10
                last edited by

                @stephenw10

                General settings.........

                ba8260f9-d0dd-4b0e-8707-4ad05f7e5c1a-image.png

                DNS Resolver..........

                aabd919e-d862-4524-b091-fea810320fee-image.png
                adb4687b-da88-4585-a77d-8682efe61f37-image.png

                224b7429-82c2-4523-90c9-0b3d956fcb1c-image.png
                803197dc-b14e-4bae-939e-33ee8ef4d81d-image.png
                2ccf3bc0-ccf3-4055-9fbe-c80543f8475b-image.png

                1 Reply Last reply Reply Quote 0
                • stephenw10S
                  stephenw10 Netgate Administrator
                  last edited by

                  OK so you have Unbound set to use any (all) interfaces for outgoing queries and that includes WAN. Since it's resolving directly anything looking for that will see the WAN IP as the source.

                  S 2 Replies Last reply Reply Quote 0
                  • S
                    stevencavanagh @stephenw10
                    last edited by

                    @stephenw10

                    So, I assume I need to remove WAN from that then.

                    1 Reply Last reply Reply Quote 0
                    • S
                      stevencavanagh @stephenw10
                      last edited by

                      @stephenw10

                      No matter what I do to the outgoing network interface i.e. leave it at WAN only, I still get the ISP ip address showing in the leak test. I thought it would just show 127.0.0.1

                      1 Reply Last reply Reply Quote 0
                      • stephenw10S
                        stephenw10 Netgate Administrator
                        last edited by

                        The leak test shows the IPs of the DNS resolver in use. Since you are using Unbound directly it will show your public WAN IP address for any queries sent out of the WAN.

                        If you set Unbound to use only the VPN connections for outbound queries the leak test will only show the VPN provider. That might cause problems for any service that uses DNS checks, like Netflix for example.

                        1 Reply Last reply Reply Quote 1
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.