OPNsense Forum

Archive => 23.7 Legacy Series => Topic started by: Alexstein on August 27, 2023, 04:24:48 AM

Title: Internal website access
Post by: Alexstein on August 27, 2023, 04:24:48 AM
Hi all.

I am new to OPNSense and have run into an issue on the network here

I have been having some issues access internal sites (Exchange OWA & ECP / mailcleaner admin portal on their FQDN's) on the internal LAN. I can access the required pages from the WAN side of things without any issues.

DNS wise i can ping the sites as required however its like the ports are being blocked on the lan to lan traffic.

However.....

if i use an IP address i can access the required sites without any issues,

Any pointers would be appreciated.

Thanks,
Alex :(
Title: Re: Internal website access
Post by: Alexstein on August 27, 2023, 04:26:29 AM
I should note that I am using internal DNS and DHCP off my windows server and all DNS services on opnsense are disabled.
Title: Re: Internal website access
Post by: gdur on August 27, 2023, 10:23:15 AM
Have you defined the DNS server (IP address) in your DHCP settings? If not your clients will use the default DNS server likely the one provided by your ISP. That is why external addresses are being resolved and internal addresses not as the external DNS server is not aware of your internal network.
Title: Re: Internal website access
Post by: Monviech (Cedrik) on August 27, 2023, 02:44:19 PM
It sounds like you neet Reflection NAT or Hairpin NAT:

https://forum.opnsense.org/index.php?topic=34925.0

You could also configure Split DNS.