DNS Server behind Pfsence
-
Hi!
I have setup my alix board with pfsence on it.
Somehow i cant setup a propper Nat or dns forwarding to let people resolve my domain.Here my setup:
In my lan : mail server , dns server , web server
Http forwarding seems to work because i can see my website if i just simply put my Public IP into the browser.
But how do i setup dns forwarding to redirect all incomming dns queries for my domain to the internal dns server?Gereral Setup -> Addes Public IP of pfsence
Tried to add the domain name & dns server IP to the Domain overrides but nothing seems to work
Does any one know how to propper set this up?
Im thankfull for any tip!
-
So you want people on the internet to talk to your dns server, your public IP is one of the registered IPs for your nameservers for you domain.
Well just port forward 53 (dns) both udp and tcp to the private IP address of your dns server.
Just like you forwarded traffic for your web server or your mail server. BTW – if your on your own network, and you put in our webserver fqdn - and you get redirect back into your webserver. That does not actually mean outside people can get to it. That is nat reflection.. You really should validate from the outside to make sure port forwards are working.
If you PM me your domain and IP address I be happy to validate any port forwards for you - if you don't want to make them public.
BTW -- hosting your own dns not great idea with all the dns attacks around lately.. There are plenty of dns services out there that do dns for their bread and butter, etc. No real reason to host your own - and where is your secondary name server?
