OPNsense Forum

English Forums => 25.1, 25.4 Production Series => Topic started by: Chesuset on April 26, 2025, 08:58:24 AM

Title: Fresh install OPNSENSE 25.1 doesn't resolve DNS on my LAN
Post by: Chesuset on April 26, 2025, 08:58:24 AM
Hi, I have upgraded from version 23.7 to 25.1 and it does not resolve any of my dns queries.

It is a fresh install, I have not created any rules in the firewall, I just installed the new version and tried to see that everything works, but no machine in my LAN is resolved from its dns queries: is there any rule to configure in version 25.1 in the firewall that allows machines in my LAN to have their DNS queries resolved? (I have enabled UNBOUND)

I am a newbie in OPNSENSE and I don't know why if I install a fresh version 23.7 my whole LAN can ping and resolve dns queries to external servers (Google.com, cisco.com, freebsd.org,..), but with version 25. 1 I can only ping if I put their ip addresses (I can ping 8.8.8.8.8 or 1.0.0.1 or any public ip that supports ping) but I can't ping or browse domains (like google.com, cisco.com,...).

During the wizard after installing OPNSENSE I specified 9.9.9.9.9 and 1.0.0.1 as DNS servers.

Title: Re: Fresh install OPNSENSE 25.1 doesn't resolve DNS on my LAN
Post by: Nortant on April 27, 2025, 02:54:47 AM
have you tried to use nslookup from your LAN device and your OPNsense?

on your LAN device, the server should be your OPNsense IP address.
Snipaste_2025-04-26_20-52-21.jpg

on your OPNsense, the server should be what you configured.
Snipaste_2025-04-26_20-53-20.jpg

Title: Re: Fresh install OPNSENSE 25.1 doesn't resolve DNS on my LAN
Post by: Chesuset on April 29, 2025, 10:33:07 PM
Good afternoon.
I don't know what is the problem, I have tried lot of things but nothing works.
I have created a rule in my LAN to allow DNS queries:

Action: Pass
Interface: LAN
Direction: in
Protocol: UDP/TCP
Source: LAN Net
Destination: Lan Address
Port: DNS

And this rule doesn´t change anything.
I have re-installed adain I have only added this rule and DNS Servers (8.8.8.8 and 8.8.4.4) in System/ Settings/General because if not I´m not able to check updates for the system.

If I try in one of my computers on my LAN the command "nslookup google.ca" the result is:
Server: OPNSense.localdomain
Address: 192.168.53.1

*** OPNSense.localdomain doesn't find google.ca: Server Failed