[SOLVED] DNS not working

[reep]

Hmmm..... bit of a head scratch going on here with DNS failure

I have a static IP for my LAN connection on  192.168.10.251

WAN1 is a DHCP connection

The first time I set up the box DNS resolved and I applied the updates.

I decided to use the OpenDNS server addresses and added them under System Settings general (It seems you can only add one DNS server in the box per WAN connection which is a bit odd)

root@OPNsense:~ # cat /etc/resolv.conf
domain mydomain.net
nameserver 127.0.0.1
nameserver 208.67.222.222
nameserver 208.67.220.220

I enabled DNS Forwarder and left all the settings at default with Interfaces set to 'all'

If I try and ping a domain name from the command line I get

root@OPNsense:~ # ping www.demon.net
ping: cannot resolve www.demon.net: Host name lookup failure

If I ping by IP it work so it seems to be a resolution failure :

root@OPNsense:~ # ping 162.13.61.33
PING 162.13.61.33 (162.13.61.33): 56 data bytes
64 bytes from 162.13.61.33: icmp_seq=0 ttl=51 time=42.691 ms
64 bytes from 162.13.61.33: icmp_seq=1 ttl=51 time=53.306 ms


Any ideas on what I have messed up ?

B. Rgds
John

[franco]

As a first thought double-check https://opnsense.box/system_general.php -> DNS Server settings should have no DNS server entries, "allow DNS to be overridden" set, "Do not use the DNS Forwarder" unset

You can also try https://opnsense.box/system_advanced_admin.php -> trigger "Disable DNS Rebinding Checks"


Cheers,
Franco

[reep]

Hi Franco, and thanks.

Sure I have just done something dumb... :-)

As a first thought double-check https://opnsense.box/system_general.php -> DNS Server settings should have no DNS server entries, "allow DNS to be overridden" set, "Do not use the DNS Forwarder" unset

So in simple terms how can you override WAN assigned DNS settings (assuming they are set) ?

I presumed I would enable the DNS Forwarder, and add the DNS servers in system_general and that should be about it ?

In DNS Forwarder it says :

"The DNS forwarder will use the DNS servers entered in System: General setup or those obtained via DHCP or PPP on WAN if the "Allow DNS server list to be overridden by DHCP/PPP on WAN" is checked. If you don't use that option (or if you use a static IP address on WAN), you must manually specify at least one DNS server on the System: General setup page."

Sorry - it may seem obvious if you know, but to an idiot like me..... :-)

You can also try https://opnsense.box/system_advanced_admin.php -> trigger "Disable DNS Rebinding Checks"

I'll give this a try too.

B. Rgds
John

[reep]

As an addendum I disabled DNS Forwarder, left the DNS Servers in system general with one IP assigned to each WAN interface, rebooted and it partially worked

On further testing it seems like my backup WAN connection that I was using to test with is possibly blocking DNS queries or somesuch - need to investigate more.

I swapped to using one of my other normal lines and it worked OK. Will test the forwarding later.