How can I enable reverse‑DNS lookups for connections in the pfSense state table / pfTop?
-
I’m using pfSense (latest version) and I want the state table (Diagnostics → States) and/or the live connection view (Diagnostics → pfTop) to show hostnames instead of raw IP addresses.
Where is the “Resolve IP addresses to hostnames” (or similar) option located?
Does the feature require any additional package or service (e.g., DNS Resolver, DNS Forwarder) to be enabled?
Are there any performance considerations or caching settings I should be aware of when enabling reverse DNS lookups?Thanks in advance!
-
@Feline not aware of anyway to just have it auto lookup or click a button like firewall log to resolve in the state table. But you could just copy paste the IP and do a dig -x for the IP to lookup the PTR. Keep in mind not all IPs have a PTR.
example here is a state in my table
209.snipped:30233 (192.168.4.51:15459) -> 16.144.187.96:8883$ dig -x 16.144.187.96 +short ec2-16-144-187-96.us-west-2.compute.amazonaws.com. -
Thanks but I was looking for an automated function that translates all the ip's, like you have on openwrt and fortigate.
Isn't there a package I can download that has that function? -
@Feline not that I am aware no..
You able to do it with ntop pretty sure - but that wouldn't be doing it in pfsense state table - but in its own listing of traffic.