0

I'm setting up Pfsense to replace our existing firewall with. Currently the setup is pretty straight forward.

  • I have internet connected to my wan port
  • connected a switch to the lan port
  • connected my desktop to the switch

I use 1 vlan (10) which is assigned to the lan port. The switch is configured so it handles the vlan correctly. I use (Pfsense) DHCP on the VLAN and my desktop get an ip in the configured range and also the DNS servers on my desktop are correctly set. (8.8.8.8 and 8.8.4.4 by DHCP) The DNS resolver settings are still default (Enabled, network interfaces all, outgoing network interfaces all) and DNS forwarder is disabled.

My NAT settings are set to Automatically outbound NAT rule generation and i configured a firewall rule on the VLAN to allow all traffic (for test purposes) enter image description here

I can ping 8.8.8.8 from my desktop AND Pfsense diagnostics. I cannot ping nu.nl for example from my desktop but i can from Pfsense diagnostics.

Why cant i resolve the domain on my desktop? I think i need to configure an extra firewall rule or something but i have no idea which one as i currently allow all traffic...

1

I noticed that i only allowed TCP traffic instead of TCP and UDP. I changed my rule to allow TCP and UDP and this solved my problem.

| improve this answer | |
  • 2
    DNS uses (mostly) UDP, but ping uses ICMP echo requests/replies that might need additional rule permission. – Zac67 May 14 at 10:51

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.