Unable to resolve DNS Queries from Local LAN

Networking & Firewalls
1

I recently build a new firewall after getting new hardware and upon setting it up I am running into an issue where devices on a few networks can’t resolve.

I am running pfSense 2.4.5-1 and have been trying to sort this out but have become stuck. I am sure it is an easy fix but I wanted to make sure I set it up correctly.

Network Wireless Firewall Rules;

VL60_FW_Rules_1
VL60_FW_Rules_11144×846 181 KB

NAT Wireless DNS Rule;

NAT_Rule_SS_1
NAT_Rule_SS_11126×1103 196 KB

From any devices on this network, I can ping anything local and external by IP but when I try to ping by hostname it doesn’t resolve. I have confirmed that DNS Resolver has this network selected for inbound requests. If I change ‘127.0.0.1’ to ‘192.168.60.1’ it seems to have resolved the issue but i followed this from pfsense documentation and wanted to make sure it isn’t anything else I am missing and should be ‘127.0.0.1’.

1 Like
2

Could it possible be related to the same issue I was facing?
https://staging-forum.lawrencesystems.com/t/pfsense-unable-to-resolve-dns-queries-against-the-wan-interface-resolved/5334/3

3

Post pic of your DNS addresses.

4

@ David & @TDCLGrant - I think i was able to resolve this after finding out i was blocking all internal traffic because of my ‘VL60_WRLSS: Reject Any Local Traffic’ rule and had to create a rule to bypass the allowed ports like DNS/53. Is there an easy way to not block any local traffic on this subnet based on how I have it setup or what are your recommendations?

1 Like
5

My only recommendation is develop a strong understanding of firewall rules and their implicit logic. You have a lot of FW rules, so there is ample opportunity for issues. Map out (draw them) all of your rules. Then you will be able to physically see where they might conflict.