DNS Lookup with localhost 127.0.0.1

Started by logi, September 09, 2024, 02:25:44 PM

Previous topic - Next topic
If I perform a DNS lookup and as a result the server is 127.0.0.1, that means Unbound DNS is resolving the DNS request? Thank you and sorry if this is a basic question, new to OPNsense

Hi,

short answer: Yes, it is the IP of the resolver. 127.0.0.1 is the 'local host' which is your OPNsense.

Br
Reza

(Interfaces -> Diagnostics -> DNS Lookup? ...)

Best regard / besten Gruß
Reza

---
"Es irrt der Mensch solang er strebt" (Goethe)


Quote from: rkube on September 09, 2024, 05:27:44 PM
Hi,

short answer: Yes, it is the IP of the resolver. 127.0.0.1 is the 'local host' which is your OPNsense.

Br
Reza

(Interfaces -> Diagnostics -> DNS Lookup? ...)

I have seen some online articles (link below) where they will define a Port Forward Firewall rule to ensure everything related to Port 53 goes through OPNsense/UnBound DNS, is it really necessary? Is that something being managed by Unbound DNS? Thanks

https://forum.opnsense.org/index.php?topic=9245.0

if you enable dhcp service on OPN, the lease contains the dns server for the client receiving the lease to use.
Some don't respect that, might have an address hardcoded. For those, the rule is a mechanism to "catch" the request and redirect it to where you want it.
Please note you haven't specified where you are doing the lookup. Client or OPN could have a different explanation.

Quote from: cookiemonster on September 09, 2024, 11:25:21 PM
if you enable dhcp service on OPN, the lease contains the dns server for the client receiving the lease to use.
Some don't respect that, might have an address hardcoded. For those, the rule is a mechanism to "catch" the request and redirect it to where you want it.
Please note you haven't specified where you are doing the lookup. Client or OPN could have a different explanation.

I was doing the lookup in OPN, thank you for the clarification

right then in that case yes, the resolution was done on the OPN itself, in the way you configured it.