DNS Overides and subdomains

[Pedro]

Hi All,

I'm rather new to opnsense and firewalls in general. I have however been tasked with migrating from an aging Zentyal install to something more secure and focused (we don't need all the bells and whistles Zentyal offers).

I've managed to get things setup and working normally, and now I'm trying to mirror what we currently have, and this is where I've hit a snag.

We currently have a couple realms or domains in Zentyal, something along the lines of:

Code: [Select]

company.lan => 10.10.200.100-200/16
dev.company.lan => 10.10.210.100-200/16
company.lan is a dhcp pool whereas dev.company.lan are statically assigned IPs.

I've created a static lease for vm1.dev.company.lan with 10.10.210.101 and added a host override in DNS Resolver with vm1.dev.company.lan and the ip. However, whenever I try and do a lookup from another machine in company.lan, I get:

vm1.company.lan has address 10.10.210.101 and not vm1.dev.company.lan

I hope this makes sense to some and hopefully you'll be able to help.

Cheers,
P

[franco]

Hi P,

Welcome.

I've tried this with the DNS forwarder in the "host overrides" section for individual IPs and it works.

The resolver is indeed not 100% correct. The code for this is newer and just underwent a substantial rework. We have a few remaining bugs that will be fixed soon, e.g.:

https://github.com/opnsense/core/issues/624

For now I can only triage and offer a workaround using the forwarder, unless that setup is not flexible enough WRT your previous setup. More on this soon.


Cheers,
Franco

[Pedro]

Hi Franco.

Thank you for your prompt reply. I've tested this and it is indeed working as I need it to work, so until those bugs are squashed, this will suffice as a workaround.

Thanks again for the help and good luck fixing those bugs. If I can help troubleshoot anything further, do let me know.

Cheers,
Pedro