Messages

1

General Discussion / Re: Wireguard and local DNS lookup

« on: June 07, 2020, 11:55:57 pm »

Hi,

sorry for the radio silence. Did not have time to test it out as my opnsense install started to behave funny one morning. It was working fine up until that and I hadn't changed anything, so not sure what happened. But some webpages did not resolve correctly were as other did. So I needed to jump back to my pfsense install to get internet working. Will see when I have time again to try out opnsense. Really liking the interface over pfsense and of course easy wireguard support.

Anyway thanks for all the help!

2

General Discussion / Re: Wireguard and local DNS lookup

« on: May 20, 2020, 12:09:01 am »

Ah, ok.

So it should have worked if I just had left the DNS entry alone? I tried just now, to remove it in opnsense and keep it on the client side. Still same issue. But I assume I need to do a reboot to restore the /etc/resolv.conf. Is that correct?

3

General Discussion / Wireguard and local DNS lookup

« on: May 19, 2020, 12:21:40 am »

Hi,

I'm trying to setup a Wireguard VPN on my opnsense box. I followed this guide: https://wiki.opnsense.org/manual/how-tos/wireguard-client.html. And it seems to work, I can connect to it with my phone when it's on 4G. Internet works and I can ping any of my local machines using their ip address. The only issue I have is that, when I have the Wireguard VPN active on my phone I cannot use the hostname registered to the unbound dns from the dhcp service. It works fine when I have my phone connected to my local network.

I tried adding 192.168.1.1 (ip of my opnsense box) to the dns field in the local wireguard configuration as well as the wireguard config on my phone. But then dns stopped working altogether. It works, except no lookup for local hostnames, when I leave it blank or if it's set to 192.168.1.1, 1.1.1.1, 1.0.0.1.

I'm a bit lost in how to debug this. Does anyone know what I might have missed?

I have attached the wireguard settings (with the private and public key redacted).

Thanks