Windows 2008 and pfSense 1.2.2

  • Have an interesting issue with Windows 2008 and pfSense. Configuring two DNS servers in pfSense, one DNS servers as the primary (the first DNS server listed) and the other DNS server as the secondary (the second DNS server listed); the idea being that clients will resolve off of the first DNS server unless there is no reply, in which case it wil resolve off the second DNS server. The problem is that now that are DNS servers are Windows 2008, clients more likely round-robin between the two DNS servers instead of using the first exclusively when it's available. Interestingly enough, this was not the case when the DNS servers were Windows 2003.

    By the way, the version of pfSense is 1.2.2.

    Any thoughts?

  • If you're using pfSense as DNS forwarder:
    pfSense will query all configured DNS servers simultaneously and respond to the client with what whichever server answered first.

    You could configure the DHCP server on the pfSense to give to the clients the DHCP servers directly.
    Configure then the behaviour how the DNS servers are used on each client locally.

    Maybe the DNS server on 2003 was just a tiny bit faster than the 2008 version so it always answered first.

  • Thanks!

    I think that answers my question.

    Generally speaking, have you noticed any other issues with using Windows 2008 DNS servers with pfSense?

    Thanks again!

Log in to reply