Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Multiple DNS Server instances

    Scheduled Pinned Locked Moved DHCP and DNS
    7 Posts 3 Posters 5.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • R
      rbflurry
      last edited by

      Is it possible in the future for multiple DNS server instances?

      Just like you can now have multiple Captive portals each assigned to a different interface?

      I need some static dns entries setup for my public wifi but do not want these entries on my internal network.

      Thanks

      1 Reply Last reply Reply Quote 0
      • jimpJ
        jimp Rebel Alliance Developer Netgate
        last edited by

        You might be able to get a similar effect by using DNS Forwarder on one interface selectively bound to there (or an alternate port + port forward) mixed with something like unbound for the other interface.

        As for multiple distinct instances of the DNS forwarder, it may or may not happen, eventually we'll be moving to Unbound and I'm not sure what might be possible there without having to resort to multiple DNS instances.

        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

        Need help fast? Netgate Global Support!

        Do not Chat/PM for help!

        1 Reply Last reply Reply Quote 0
        • johnpozJ
          johnpoz LAYER 8 Global Moderator
          last edited by

          I don't believe unbound supports views which is what seems they are asking for..  They want queries from source X to get different results than query from source Y.

          Install bind either on pfsense or some other box on your network and your all set.. Bind supports views.

          Turn off the built in forwarder and just install bind - simple as
          pkg_add -r ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-8.3-release/dns/bind99-9.9.0_1.tbz
          rehash

          Then you can do whatever you could do with bind.  BTW that is link to latest bind, there are other older versions you might want to run.  And that is for i386 change to amd64 if that is the version of pfsense your running.

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.8, 24.11

          1 Reply Last reply Reply Quote 0
          • jimpJ
            jimp Rebel Alliance Developer Netgate
            last edited by

            Yes, BIND does support views, but it doesn't hook into the GUI at all.

            What I was suggesting was:

            Unbound serves up general queries on port 53
            dnsmasq binds to 5353 with some advanced options to set specific host overrides that would only show up in dnsmasq
            Port forward the segments such that when they hit <pfsense ip="" on="" that="" segment:53="" it="" goes="" to="" localhost:5353="" for="" the="" places="" you="" want="" receive="" other="" hostsnames.<br="">Might be uglier than setting up BIND by hand, but unless you already happen to know bind and are comfortable with working in the shell, it would be a lot easier to use my method.</pfsense>

            Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

            Need help fast? Netgate Global Support!

            Do not Chat/PM for help!

            1 Reply Last reply Reply Quote 0
            • R
              rbflurry
              last edited by

              Thanks a bunch!

              Views is exactly what I was looking to do. (Basically a dirty way to break certain webpages)

              I will try both methods but I am up for the challenge with the command line.

              As of right now I am forwarding the request to a wifi router running dd-wrt but I would rather not leave that running.

              Thanks again.

              1 Reply Last reply Reply Quote 0
              • R
                rbflurry
                last edited by

                Hopefully this package turns out well!

                This sounds like what i need.

                http://forum.pfsense.org/index.php/topic,67917.0/topicseen.html

                1 Reply Last reply Reply Quote 0
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator
                  last edited by

                  Yup once that package is working you should be golden.. I tried installing it last night - and think it has some kinks to work out currently - but the gui interface to bind settings looks fantastic!!

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                  1 Reply Last reply Reply Quote 0
                  • First post
                    Last post
                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.