Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - ka2er

#1
Hi,

my opnsense box is configured with multiple interfaces and is named fw.mydomain.fr.
It has dns resolver enabled in fordwarding mode.

When an internal client try to resolve fw.domain.fr it receive a lot of IP causing horrible lag when trying to connect via browser to FW as the interface reachable is the last in the DNS answer.
dig fw.home.wospe.fr

; <<>> DiG 9.8.3-P1 <<>> fw.mydomain.fr
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 50769
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;fw.mydomain.fr. IN A

;; ANSWER SECTION:
fw.mydomain.fr. 3600 IN A 192.168.4.1
fw.mydomain.fr. 3600 IN A 192.168.2.1
fw.mydomain.fr. 3600 IN A 192.168.1.1


How can I limit answer to only the last one ? don't know which setting cause this answer ?
Is there a better approch to reach my opnbox via fqdn ?

ps: my box is https exposed to internal lan via haproxy + let'sencrypt plugin.

Thanks for any hint or help.