Fresh install OPNSENSE 25.1 doesn't resolve DNS on my LAN

Started by Chesuset, April 26, 2025, 08:58:24 AM

Previous topic - Next topic
Hi, I have upgraded from version 23.7 to 25.1 and it does not resolve any of my dns queries.

It is a fresh install, I have not created any rules in the firewall, I just installed the new version and tried to see that everything works, but no machine in my LAN is resolved from its dns queries: is there any rule to configure in version 25.1 in the firewall that allows machines in my LAN to have their DNS queries resolved? (I have enabled UNBOUND)

I am a newbie in OPNSENSE and I don't know why if I install a fresh version 23.7 my whole LAN can ping and resolve dns queries to external servers (Google.com, cisco.com, freebsd.org,..), but with version 25. 1 I can only ping if I put their ip addresses (I can ping 8.8.8.8.8 or 1.0.0.1 or any public ip that supports ping) but I can't ping or browse domains (like google.com, cisco.com,...).

During the wizard after installing OPNSENSE I specified 9.9.9.9.9 and 1.0.0.1 as DNS servers.


have you tried to use nslookup from your LAN device and your OPNsense?

on your LAN device, the server should be your OPNsense IP address.
You cannot view this attachment.

on your OPNsense, the server should be what you configured.
You cannot view this attachment.


Good afternoon.
I don't know what is the problem, I have tried lot of things but nothing works.
I have created a rule in my LAN to allow DNS queries:

Action: Pass
Interface: LAN
Direction: in
Protocol: UDP/TCP
Source: LAN Net
Destination: Lan Address
Port: DNS

And this rule doesn´t change anything.
I have re-installed adain I have only added this rule and DNS Servers (8.8.8.8 and 8.8.4.4) in System/ Settings/General because if not I´m not able to check updates for the system.

If I try in one of my computers on my LAN the command "nslookup google.ca" the result is:
Server: OPNSense.localdomain
Address: 192.168.53.1

*** OPNSense.localdomain doesn't find google.ca: Server Failed