I'm new to setting up a pfSense router and am having some odd cases where some URL's are not working. I do have pfBlockerNG setup, but I've tried disabling the firewall/removing rules and none of those helped. So my guess is that it's not the firewall, but some sort of DNS resolver issue.
My setup:
I'm getting 2 very similar issues:
BUT when I do pfSense/Diagnostics/Ping I get the following error:
Because 1.1.1.1 seems to resolve it I've tried setting the "DNS Resolution Behavior" to "Use remote DNS Servers, ignore local DNS". But no luck. It removes the `Got SERVFAIL` error from the pfSense nslookup. But still same error on my local PC.
One thing that appears to fix this issue is to manually set the DNS Server on my local pc. When I set it to 1.1.1.1 and do a `nslookup picrew.me` I get the following response:
The only other "fix" is to set a Domain Override to use the Lookup Server IP Address as 1.1.1.1 But this is a crazy method as I would have to do this to every single domain that I run accross that has this problem.
What can I do to fix this? (if you need any more settings, or logs please let me know and I'll post them)
My setup:
- pfSense version 2.7.0-DEVELOPMENT (amd64)
- DNS servers 1.1.1.1 and 1.0.0.1 are setup
- DNS Server Override: Disabled
- DNS Resolution Behavior: Use local DNS (127.0.0.1), fallback to remote DNS (default)
- General DNS Resolver Options/(enabled) Enable DNS resolver
- DNSSEC: (enabled) Enable DNSSEC Support
- DNS Query Forwarding: (enabled) Enable Forwarding Mode
I'm getting 2 very similar issues:
- DNS Resolves the URL, but I can't ping the URL
- DNS resolves, and I can ping/nslookup from pfSense, but on my PC it doesn't work.
- usw2.pure.cloud
- restream.io
When I ping I get the following error:This site can’t be reachedrestream.io’s server IP address could not be found.
When I do a nslookup i get the following error:Ping request could not find host restream.io. Please check the name and try again.
In pfSense/Diagnostics/DNS Lookup I am able to hit both of the URLs just fine.Server: [server name here]
Address: 192.168.1.1
*** [server name here] can't find restream.io: Server failed
BUT when I do pfSense/Diagnostics/Ping I get the following error:
For issue #2 I'm having issues with the following url:PING restream.io (3.233.7.160): 56 data bytes --- restream.io ping statistics --- 3 packets transmitted, 0 packets received, 100.0% packet loss
- picrew.me
But on my local PC trying `nslookup picrew.me` I get the following error:;; Got SERVFAIL reply from 127.0.0.1, trying next server
Server: 1.1.1.1
Address: 1.1.1.1#53
Non-authoritative answer:
Name: picrew.me
Address: 108.138.167.27
Name: picrew.me
Address: 108.138.167.56
Name: picrew.me
Address: 108.138.167.78
Name: picrew.me
Address: 108.138.167.114
;; Got SERVFAIL reply from 127.0.0.1, trying next server
Again I can do a DNS Lookup, and Ping from inside pfSense for picrew.me. But it doesn't appear to work on my local PC to resolve.Server: pfSense.[server name].net
Address: 192.168.1.1
*** pfSense.[server name].net can't find picrew.me: Server failed
Because 1.1.1.1 seems to resolve it I've tried setting the "DNS Resolution Behavior" to "Use remote DNS Servers, ignore local DNS". But no luck. It removes the `Got SERVFAIL` error from the pfSense nslookup. But still same error on my local PC.
One thing that appears to fix this issue is to manually set the DNS Server on my local pc. When I set it to 1.1.1.1 and do a `nslookup picrew.me` I get the following response:
But that defeats the purpose of using pfSense as the DNS router....Server: one.one.one.one
Address: 1.1.1.1
Non-authoritative answer:
Name: picrew.me
Addresses: 108.138.167.114
108.138.167.78
108.138.167.56
108.138.167.27
The only other "fix" is to set a Domain Override to use the Lookup Server IP Address as 1.1.1.1 But this is a crazy method as I would have to do this to every single domain that I run accross that has this problem.
What can I do to fix this? (if you need any more settings, or logs please let me know and I'll post them)