[Solved] DMZ trouble with DNS

[Kapman]

Hello,
I have a Ubuntu server on an DMZ I just configured that cannot resolve domain names.

I'm currently running version 18.1.5.
I have the interface enabled and setup with a static ip.
Unbound DNS is being used with the setting "Network Interfaces" set to "All".

There is a single Ubuntu server installed on the DMZ.  I can ping it from the LAN & OpnSense.
The Ubuntu server is set with the correct DNS server (the opnsense server).
The Ubuntu server cannot resolve domain names.  From the Ubuntu server, I cannot ping the OpnSense machine where Unbound DNS is running.

Any ideas about what I'm doing incorrectly here?

Thanks in advance!

[bitman]

do you have any allow firewall rules on that DMZ network?

[Kapman]

I have Unbound DNS set with "Network Interfaces" set to "All".  I assumed that implied the DNS server (opnsense) should be available on the network.
The DNS server is 192.168.2.1 and the Ubuntu server is 192.168.2.100 in this case.  I'm pinging from 192.168.2.100 to 192.168.2.1.  The reverse works.
I don't think I need a rule for that, do I? 

[Kapman]

Turns out adding a rule is the correct solution!
This is fixed.

Thanks Bitman!

[Kapman]

Hello everyone,
Adding a screen capture of the rules I setup in my DMZ to help others out and just in case some other folks notice this can be improved.

[elektroinside]

Thanks for your feedback, appreciated.
Also, you can prepend [Solved] to the title if you feel you no longer have related issues.
Thanks again.