DNS issue with wpad

dirkallard

Hi,

I have the following situation:

pfsense 2.3 on APU2
WAN
3x LAN (1 with physical interface, 2 with VLAN), connection works
SQUID/Squidguard operating correctly

I did not want to put the GUI on http, so I established a second nginx, listening on port 80, the original one, configured by webgui, listens on the configured https-port.

Using the dns forwarder I set up the wpad hostname (domain: localdomain). This works perfectly on the first (physical) LAN.

The proxy configuration is working also (automatically on the first LAN, if configured manually on the VLANs). I have to configure the proxy using these addresses:

physical LAN: 192.168.1.1:PORTNUMBER (but also works using the automatic settings in client browsers)
VLAN1: 192.168.2.1:PORTNUMBER
VLAN2: 192.168.3.1:PORTNUMBER

Looking at the dns resolution of wpad.localdomain, this does not work for the VLANs, only for the physical LAN.

I assume, I did something wrong with the dns forwarder - any hints for me, what should be configured?

Kind regards

Dirk

johnpoz

Your going to want to localise responses

-y, –localise-queries
Return answers to DNS queries from /etc/hosts which depend on the interface over which the query was received. If a name in /etc/hosts has more than one address associated with it, and at least one of those addresses is on the same subnet as the interface to which the query was sent, then return only the address(es) on that subnet. This allows for a server to have multiple addresses in /etc/hosts corresponding to each of its interfaces, and hosts will get the correct address based on which network they are attached to. Currently this facility is limited to IPv4.

You will then need to create entries in each vlan

Here is a thread were this was discussed before
https://forum.pfsense.org/index.php?topic=106872.0

I even put some examples in there on how to use..