OPNSense answers to pings from different IP-addresses?

Started by blue_shift, September 21, 2022, 02:42:57 PM

Previous topic - Next topic
Hello,

I just set up a new OPNSense configuration and everything seems to work pretty fine. But I just recognized that always when I ping the hostname of the OPNSense, it responds with different IP-addresses?! Seem to be an interface-IP that I set on the different interfaces.

I set one LAN-interface, two WAN-interfaces and 3 more VLAN-interfaces. I got several firewall rules to seperate the VLANs from each other.

E.g. if I ping the hostname of the OPNSense, it response with the IP-address of one of the WAN-interface instead of the IP of the LAN-interface.

Am I doing something wrong? Seems to be something with the DNS I guess...

Thanks for your help

Hi,

I expect that pinging the OPNsense hostname will produce random results of IP addresses. If you do a drill for the hostname you should get the assigned interfaces' A/AAAA records (e.g. `drill @127.0.0.1 hostname.domain`). Having A/AAAA records for every listen interface has been the default behaviour for ages but has recently (22.7.4) been changed to provide more flexibility in what you want to expose.

You can select "Do not register system A/AAAA" records in Unbound -> General and provide your own entries in Unbound -> Overrides.