[SOLVED] UnboundDNS needs to talk to an DNS Server behind an IPSec VPN

[cherzberg]

HI all,

I have setup an IPSec VPN which works fine for all clients within the LAN netzwerk.
The OPNSense itself can not access the network behind the VPN but it need to.
The Unbound DNS server needs to talk to an DNS server behind the VPN because this is the DNS server for the privat domain.

OPNSense LAN (192.168.2.0/24) <---VPN----> Remote network (192.168.192.0/24) (DNS Server 192.168.192.20)

At the Unbound DNS Server I have configured for domain qqqqqq.local to use DNS Server 192.168.192.20.

How can I configure that unbound can access my remote network? I guess that opensense uses the WAN ip address as source ip but this can not work.

Any suggestion is welcome.

Thanks
Christian

[zerwes]

Services: Unbound DNS: General:Outgoing Network Interfaces
The IP of the iface configured here will be set as a SRC on requests made by onbound.
If this IP is the right one to pass your VPN, this should work (I have several setups using this, as we have several branch offices with a own dns zone, but many other zones need to be resolved via the DNS hosted at the headquarter .. and the way there is through the VPN) Set this to LAN and it should work.
Do not forget to configure the domain overide for qqqqqq.local  -> 192.168.192.20
And I would recommend you setting Services: Unbound DNS: Advanced:Serve expired responses (in case your VPN is down)

[cherzberg]

Hi zerwes,

that was the point. Thanks a lot!

Cheers
Christian