Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    DNS resolver configuration Issue

    Scheduled Pinned Locked Moved DHCP and DNS
    4 Posts 2 Posters 161 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • G
      Gokulapandi
      last edited by

      In my pfSense firewall, I have set the pfSense IP address as the primary DNS server for both the LAN and OpenVPN clients.

      Within the LAN, I host several internal domains, and I’ve configured host overrides in the DNS Resolver for these -. Additionally, I have an IPsec connection to an AWS account, where certain application load balncer DNS names (e.g., a1XXXXXXXXXXXXXXXXXXXX0.elb.eu-north-1.amazonaws.com) point to resources within a private subnet.

      Now, I want to configure my network so that all types of domain names resolve correctly, including:

      Internal LAN domains

      Public internet domains

      AWS private subnet domains (such as internal ALB DNS names)

      I have disabled the dns forwarder.

      Within my LAN network, I host a few internal domains. For those domains, I have added host overrides in the DNS Resolver. Its working as expected.

      Cuurently, i am facing an issue with resolving the internal ALB DNS names from OpneVPN and LAN, but the same internal ALB DNS names are resolving in public.

      Anyone suggest the solution ?

      V 1 Reply Last reply Reply Quote 0
      • V
        viragomann @Gokulapandi
        last edited by

        @Gokulapandi
        Add domain overwrites for your AWS domains and point it to the remote dns server.

        G 1 Reply Last reply Reply Quote 1
        • G
          Gokulapandi @viragomann
          last edited by

          @viragomann
          Thanks, I have added that it's resolving when we are trying to ping but resolving in the nslookup command.

          aa57ad85-7591-45ef-a8a6-863067de9381-image.png

          DNS lookup is working in pfsense firewall itself.

          097110ad-a48f-4d4b-b52b-244d8b97a775-image.png

          V 1 Reply Last reply Reply Quote 0
          • V
            viragomann @Gokulapandi
            last edited by

            @Gokulapandi
            The DNS resolver doesn't hand out private IPs by default. You have to enable this with a custom option:

            server:
            private-domain: "<your-domain.tld>"
            

            The server line is only needed if you haven't one already, otherwise you can write the private-domain line below of it.

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.