Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Domain Override through IPsec Tunnel

    DHCP and DNS
    3
    4
    858
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      dg40 last edited by

      Searched but can't find an answer.
      Using resolver and trying to get remote office to query corporate DNS through IPsec tunnel. I can ping IP's but not with DNS. nslookup works when setting server to DNS on other side of tunnel (permission test).

      Forwarding mode is on and mydomain.local is in overrides list to private dns ip on other side of tunnel.
      I've been doing this for years on m0n0wall but just can't get it to go on pfsense. What am I missing?

      1 Reply Last reply Reply Quote 0
      • D
        doktornotor Banned last edited by

        Not exactly clear what are you trying to overridde from where or "ping with DNS" (?!?)

        https://doc.pfsense.org/index.php/Why_can%27t_I_query_SNMP,_use_syslog,_NTP,_or_other_services_initiated_by_the_firewall_itself_over_IPsec_VPN

        1 Reply Last reply Reply Quote 0
        • johnpoz
          johnpoz LAYER 8 Global Moderator last edited by

          What dns are you handing your ipsec clients.  I take it this a site to site connection, so the dns those devices at that site are using would have to be dns at your site that resolves what you want, or their local dns would have to forward to your dns to resolve what you want from your ispec server site.

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          2440 2.4.5p1 | 2x 3100 2.4.4p3 | 2x 3100 22.01 | 4860 22.05

          1 Reply Last reply Reply Quote 0
          • D
            dg40 last edited by

            Thanks,
            Static route did the trick. Forgot about that.

            My thinking was that I if I could connect with IP address' that DNS should also work without static routes. After reading that article it all makes sense now.
            Thank you so much :)
            I shouldve known as I had static route on my old m0n0wall ::)

            BTW. Migrating from m0n0wall and really appreciate all the work that has been done. I've tried all the other embedded firewalls and nothing is as stable and familiar as pfSense.
            I think pfSense is going to put a hurting on soekris also.

            1 Reply Last reply Reply Quote 0
            • First post
              Last post