Internal website access

[Alexstein]

Hi all.

I am new to OPNSense and have run into an issue on the network here

I have been having some issues access internal sites (Exchange OWA & ECP / mailcleaner admin portal on their FQDN's) on the internal LAN. I can access the required pages from the WAN side of things without any issues.

DNS wise i can ping the sites as required however its like the ports are being blocked on the lan to lan traffic.

However.....

if i use an IP address i can access the required sites without any issues,

Any pointers would be appreciated.

Thanks,
Alex

[Alexstein]

I should note that I am using internal DNS and DHCP off my windows server and all DNS services on opnsense are disabled.

[gdur]

Have you defined the DNS server (IP address) in your DHCP settings? If not your clients will use the default DNS server likely the one provided by your ISP. That is why external addresses are being resolved and internal addresses not as the external DNS server is not aware of your internal network.

[Monviech (Cedrik)]

It sounds like you neet Reflection NAT or Hairpin NAT:

https://forum.opnsense.org/index.php?topic=34925.0

You could also configure Split DNS.