• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Pfsense Recursive DNS Resolution, 2 questions

Scheduled Pinned Locked Moved DHCP and DNS
3 Posts 2 Posters 1.9k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • 5
    5john
    last edited by Nov 16, 2015, 8:26 PM

    I have a pfsense router behind a pfsense router.
    I prefer to log all incoming and outgoing traffic, and to keep the traffic simple and 'readable'.
    This is complicated by both pfsense routers attempting to do DNS queues, which creates (much) additional traffic on UDP port 53.

    Is there a way I could force all networked machines, plus the first pfsense router itself, to do DNS queues only from the first pfsense router?

    Additionally, pfsense will send DNS queues to a great deal of different DNS servers. I don't really understand how recursive DNS queues are done, and I would like to simplify this traffic as much as possible. Is it possible to choose only one, or several specific, sources to send DNS queues to?

    1 Reply Last reply Reply Quote 0
    • D
      Derelict LAYER 8 Netgate
      last edited by Nov 16, 2015, 8:28 PM

      Use DNS forwarder or DNS resolver in forwarding mode.

      Chattanooga, Tennessee, USA
      A comprehensive network diagram is worth 10,000 words and 15 conference calls.
      DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
      Do Not Chat For Help! NO_WAN_EGRESS(TM)

      1 Reply Last reply Reply Quote 0
      • 5
        5john
        last edited by Nov 16, 2015, 8:46 PM

        Thanks!

        For other peoples reference:

        https://doc.pfsense.org/index.php/DNS_Forwarder
        (The DNS Forwarder is not active by default. It has been replaced by Unbound as a DNS Resolver. It may still be used, and is still active on upgraded configurations)

        https://doc.pfsense.org/index.php/Unbound_DNS_Resolver
        (Enable Forwarding Mode: Controls whether Unbound will query root servers directly (unchecked, disabled) or if queries will be forwarded to the upstream DNS servers defined under System > General or those obtained by DHCP/PPPoE/etc (checked, enabled).)

        1 Reply Last reply Reply Quote 0
        3 out of 3
        • First post
          3/3
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
          This community forum collects and processes your personal information.
          consent.not_received