OPNsense Forum

English Forums => General Discussion => Topic started by: guest27102 on January 28, 2021, 07:24:51 PM

Title: How to troubleshoot why some domains won't resolve?
Post by: guest27102 on January 28, 2021, 07:24:51 PM
Hi,
I suspect I might have some issue with DNS or some related issue. Some domains just don't resolve. Like duckduckgo.com, ecosia.org. I noticed this because I couldn't search. On my Mac the DNS under Network settings is my AP's ip. But if I change that to mullvads DNS 193.138.218.74 it works. I am connecting to a VPN (WireGuard Mullvad) with the same DNS provided in Local. So it should be the same :/

If I go to "Interfaces: Diagnostics: DNS Lookup" and try to resolve duckduckgo.com:

Response Type Address
                A 52.142.124.215
                NS dns1.p05.nsone.net.
                NS ns04.quack-dns.com.
                NS dns2.p05.nsone.net.
                NS dns3.p05.nsone.net.
                NS ns01.quack-dns.com.
                NS dns4.p05.nsone.net.
                NS ns02.quack-dns.com.
                NS ns03.quack-dns.com.

Resolution time per server
Server             Query time
193.138.218.74     16 msec


But when trying to ping "Interfaces: Diagnostics: Ping"


# /sbin/ping -c '3' 'duckduckgo.com'
PING duckduckgo.com (52.142.124.215): 56 data bytes

--- duckduckgo.com ping statistics ---
3 packets transmitted, 0 packets received, 100.0% packet loss


Whereas opnsense.org and other domains works fine:

# /sbin/ping -c '3' 'opnsense.org'
PING opnsense.org (81.171.2.181): 56 data bytes
64 bytes from 81.171.2.181: icmp_seq=0 ttl=54 time=37.651 ms
64 bytes from 81.171.2.181: icmp_seq=1 ttl=54 time=26.518 ms
64 bytes from 81.171.2.181: icmp_seq=2 ttl=54 time=38.487 ms

--- opnsense.org ping statistics ---
3 packets transmitted, 3 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 26.518/34.219/38.487/5.456 ms


I tried to disable "Services: Unbound DNS: Blacklist" just for good measure but with same result.

How do I go about troubleshooting this? Any tips?
Title: Re: How to troubleshoot why some domains won't resolve?
Post by: guest27102 on January 28, 2021, 07:57:47 PM
How can I delete this post? It is inaccurate.
Title: Re: How to troubleshoot why some domains won't resolve?
Post by: dwasifar on January 28, 2021, 10:26:28 PM
Edit the original post, delete everything you said, and replace it with the words "Never mind."  :D