Web GUI dig <opnsnes fqdn> shows multiple ip addresses?

[7queue]

New to OPNsense here.

Is there a howto on configuring web GUI access on only LAN segment? Following any of the search results and docs do not work as expected.

On the actual OPNsense system using the diagnostics DNS lookup I get the LAN IP only which is what I want to see returned on any system on the LAN segment. (Do not register system A/AAAA records checked)

Issuing "dig <opnsense fqdn>" on any system on the LAN segment returns all Internal IPs?


For now I've brute forced it in the hosts file on all the systems, there has to be a better way.

Any pointers?

Thanks!

[cookiemonster]

Patrick Hausen has written a few times how to address it. Do a search. Will have the long and better explained way.
In short, create a host override in your DNS server pointing it to the ip you want to return.

[7queue]

Thanks for the pointer.

I wound up adding a localhost ip, dns overide and the dns overide fqdn to alternate hostnames.

I might add another nic and dedicate that to managing systems.