Messages

Morning,

Everything seemed to be working from the last settings we made. I'm confirming with more users to see if everything is good.

If everything is good could we just leave it with the settings we have now or should we do more troubleshooting/changes?

That setting seems to work.

The client pc has internet now.

In the picture the first search was nslookup google.de and the second was nslookup google.de 8.8.8.8

I unchecked the allow dns server list to be overidden, tried with 8.8.8.8 as my first option as well as the cisco addresses and it failed, pulled out the google dns and just left the cisco ones and it still failed.

I already removed the DHCP server settings that I made because I knew that made the network work and I'm sure you wanted it in the state of not having that info in there.

The nslookup looks the same as they did with those settings applied.

Last but not least, I can still talk with the end user on teams, control his screen via teams but can't access the internet on it while on that network.

Here you go.

I have his computer for the next couple of minutes so let me know if there is anything else you'd like me to try.

No We start at 17, we have 17-21 as usable ips. GW is 22.

We have a firewall that has 17-20.

21 is opnsense.

You want me to run the nslookup directly from opnSense or from a computer connected to opnSense?

We have 5 ips from Comcast we use the last one for opnSense.

My subnet mask is 255.255.255.248 which from what I looked up is a /29. At one point I did have it as /28. That was before I reached out to you guys for help.

I thought it was strange that our gateway was higher than our ip's but all our other equipment works in that office.

Morning,

Attached is my wan interface info.

My wan is statically assigned, it's physically connected to my comcast modem. One network wire goes from the computer directly to the modem. Not using dial in, yes an existing internet connection.

Let me know if you want me to still get you that nslookup info.

I will most likely have to remove the settings that I have put in to get it working in the interim.

And can you post the output of the follwing command on one of the clients ?

open a comand prompt:

Code Select Expand

nslookup google.de 8.8.8.8

thanks


EDIT:
And can you post the settings of your WAN interface ?

Everyone is gone for the day out there. I can have someone test it tomorrow for me. I will have to remove my dns settings first too.

Ok,

the rules are right -> You allow everything out of your network.

So please check if the Unbound is running:
Go to Services > Unbound DNS > General
>>> Have a look at the top right, is there a green "Play" button?

And please post a screen of
> Services > unbound DNS > Log File

thanks

The green button is there, let me know if you want me to run it. It looks like the service isn't running.

Also there aren't any log files.

Hey

See attached.

I don't remember putting any of this info in here, I just looked at another one of my machines and there are only 4 rules not 24 like this one.

Hi Mario,

No need for the question. Feel free to ask me whatever as you guys are trying to help me.

I have pretty much the default set up, I installed opnSense, I assigned my ip addresses, the dns settings, created a firewall rule so only I can get on the machine and that's about it. nothing else was edited.

That being said I don't know if port 53 is open on the Lan Interface or where to go to check. If you give me the steps to check I will take a look.

Hi CJRoss

DNS lookups with nothing in server are attached. Did Amazon & ESPN. Haven't looked at these before so i'm not sure what i'm looking at, I did look at this on a machine that seems to be working and it looks different.

When I type 127.0.0.1 in the server field I get no results.

Yes i'm using the default unbound. pic attached (Unbound settings)

I do want to let you know that it seems to be fixed at least on the devices that are connecting to the internet side because of the settings I added under Services, DHCPv4, Lan, DNS Servers. Pic attached (DHCP DNS)

Hi,

So it looks like a dns problem because once I changed his windows wireless ipv4 dns settings to googles and the device was able to browse the web fine.

Attached are my dns settings that are from the opnSense, system, settings, general. These are the settings I have pretty much on all of my other servers.

Also attached is the ipconfig when it wasn't working as well as the nslookup when it wasn't working as well.

Hi All,

New to the forum but not too new to opnSense, we have about 10 machines with the software on it. One of our machines when computers connect to it, it says no internet, however the computer can ping googles dns servers and other dns servers. It also can be accessed via Microsoft teams phone calls and sharing screen but it can't for the life of it browse the internet and I can't figure out what I'm missing.

I've ruled out the provider and my wireless router and it seems to be an opnSense issue but I can't figure out where.

I even did a fresh install and it still doesn't work.

Any help would be greatly appreciated.

Can you provide a diagram, including the other machines that you're testing with?  Including one of the ones most similar to this but working.

When you mention it says no internet, are you referring to the MS indicator and check?

What do you mean about it being able to accessed by Teams calls and sharing?

Have you tried any DNS lookups?  What does the ip config look like?  Is this DHCP or manually assigned?

I've tested with a few laptops, a postage machine and a few cell phones.

All the devices have this problem.

I have Comcast Cable with a Static IP address, a cable comes out of there into the wan port on my opnSense machine, another cable comes out of my lan port and goes to my wireless router. It's an old Netgear nighthawk.

It could be the MS indicator check, if I look at the ethernet port or wireless card in windows it says connected no internet. If I open up a web browser and try to browse the internet I don't get to any pages, outlook doesn't work. The strange thing is I can be on a teams call with someone on this network (using the internet that the system claims it doesn't have) but can't browse the web or connect to outlook.

I will try dns lookups, I will send a pic of an ipconfig. The devices are getting dhcp from the opnSense software however I have also tried statically giving ip addresses from the opnSense machine as well because I thought at one point captive portal was the problem.

it says no internet, however the computer can ping googles dns servers and other dns servers

Are those computers on the LAN interface of OPNsense? Try setting their DNS to 1.1.1.1 / 8.8.8.8 / 9.9.9.9 (other public DNS is available)

Have a haiku  8)

Bart...

Hi Bart

I've had the DNS servers set to 8.8.8.8 as well as comcast's dns servers on the opnSense side under System, Settings, General, Networking.

Did you want me to try setting a computers DNS directly to that, that's on the lan?