Home
Help
Search
Login
Register
OPNsense Forum
»
English Forums
»
General Discussion
»
DNS server used by OPNsense itself
« previous
next »
Print
Pages: [
1
]
Author
Topic: DNS server used by OPNsense itself (Read 4396 times)
banana999
Newbie
Posts: 16
Karma: 0
DNS server used by OPNsense itself
«
on:
January 23, 2021, 01:56:58 pm »
So in system -> settings -> general I have 1.1.1.1 as my DNS.
'Allow DNS server list to be overridden by DHCP/PPP on WAN' is NOT checked.
'Do not use the local DNS service as a nameserver for this system' is NOT checked.
I also have unbound DNS enabled.
In my DHCP settings I have set the DNS as 192.168.1.3, this is the only place I have set 192.168.1.3 for any DNS settings. (apart from WireGuard config)
Now I'd assume that only DHCP clients would use 192.168.1.3 but it appears that OPNsense itself is also using it as it's default DNS server? When I run 'dig' on the command line it is using 192.168.1.3 by default, also '/etc/resolv.conf' has 192.168.1.3. If 192.168.1.3 is offline then dig does not work.
How do I make OPNsense use either 1.1.1.1 as it's DNS or 127.0.0.1 (unbound)?
«
Last Edit: January 23, 2021, 04:25:53 pm by banana999
»
Logged
franco
Administrator
Hero Member
Posts: 17665
Karma: 1611
Re: DNS server used by OPNsense itself
«
Reply #1 on:
January 23, 2021, 07:31:17 pm »
Since we had the same issue not long ago I get straight to the biscuits: are you using WireGuard?
Cheers,
Franco
Logged
banana999
Newbie
Posts: 16
Karma: 0
Re: DNS server used by OPNsense itself
«
Reply #2 on:
January 23, 2021, 07:35:15 pm »
Hi Franco, yes I am using Wireguard
Logged
franco
Administrator
Hero Member
Posts: 17665
Karma: 1611
Re: DNS server used by OPNsense itself
«
Reply #3 on:
January 23, 2021, 07:36:07 pm »
Bingo
Wireguard overwrites the system resolv.conf unfortunately if you use the DNS option so you cannot use it.
Cheers,
Franco
Logged
banana999
Newbie
Posts: 16
Karma: 0
Re: DNS server used by OPNsense itself
«
Reply #4 on:
January 23, 2021, 07:39:12 pm »
Oh ok!
Will it get fixed / will there be any issues if I remove the DNS option in VPN -> Wireguard -> Local -> DNS Server
And just specify the DNS server on my client side config only? Or is that a required field?
Logged
franco
Administrator
Hero Member
Posts: 17665
Karma: 1611
Re: DNS server used by OPNsense itself
«
Reply #5 on:
January 23, 2021, 07:52:42 pm »
It can't be fixed since WireGuard is scripted to take over resolv.conf of the system. Better to set DNS on the clients indeed.
In the plugin we can only add a proper help text and maybe hide the feature under advanced.
Cheers,
Franco
Logged
Print
Pages: [
1
]
« previous
next »
OPNsense Forum
»
English Forums
»
General Discussion
»
DNS server used by OPNsense itself