Internal Routing to working properly?



  • I have been running pfSense for a while now.
    I'm on version 2.0.3 (x86) running within a ESXi VM.

    All working great! Except internal routing is not working properly in my opinion. Probably I'm doing something wrong but I can not find it.
    Let me explain my situation:

    I have pfSense running as a Virtual Machine. On My ESXi 5.1 host I have multiple servers running.
    pfSense is set as DHCP server, DNS, NAT and firewalling.
    The servers running on my ESXi host have static IP's. I have multiple external (outside) IP's.
    So all my important servers have external IP's. I have set Virtal IP's & 1:1 NAT.
    For instance internal IP 192.168.1.11 is linked to external IP: 5...201
    So far so good. Everything working. From outside the network the servers can be reached without problems.
    But….

    Internally the servers can only reach each other by internal IP address.
    If I go to webmail.mydomain.com (which is linked to IP: 5...201) it does NOT go to the webmail page but goes to the pfSense login screen.
    Going to the external IP (instead of DNS name) it redirects to the pfSense login page as well.

    Externally webmail.mydomain.com is working. But inside the network it's not.

    Any clue?



  • You either need to enable NAT reflection or specify the internal IPs in your DNS server.  The latter is a better solution.



  • Thanks for the fast reply!
    I'll go for the latter option.

    Can you point to me to the right direction?
    Services -> DNS Forwarder -> Host Overrides ??



  • @Panja:

    Thanks for the fast reply!
    I'll go for the latter option.

    Can you point to me to the right direction?
    Services -> DNS Forwarder -> Host Overrides ??

    Yes, as long as your client systems are using your pfSense box as their DNS server that will work fine.



  • Yes, they are using pfSense as DNS server.

    Ok, thanks again. I'll give it a try!