Why can i ping domain from Pfsense diagnostics but not from my desktop?

Question

I'm setting up Pfsense to replace our existing firewall with. Currently the setup is pretty straight forward.

• I have internet connected to my wan port
• connected a switch to the lan port
• connected my desktop to the switch

I use 1 vlan (10) which is assigned to the lan port. The switch is configured so it handles the vlan correctly. I use (Pfsense) DHCP on the VLAN and my desktop get an ip in the configured range and also the DNS servers on my desktop are correctly set. (8.8.8.8 and 8.8.4.4 by DHCP) The DNS resolver settings are still default (Enabled, network interfaces all, outgoing network interfaces all) and DNS forwarder is disabled.

My NAT settings are set to Automatically outbound NAT rule generation and i configured a firewall rule on the VLAN to allow all traffic (for test purposes)

I can ping 8.8.8.8 from my desktop AND Pfsense diagnostics. I cannot ping nu.nl for example from my desktop but i can from Pfsense diagnostics.

Why cant i resolve the domain on my desktop? I think i need to configure an extra firewall rule or something but i have no idea which one as i currently allow all traffic...

Answer 1

I noticed that i only allowed TCP traffic instead of TCP and UDP. I changed my rule to allow TCP and UDP and this solved my problem.

Answer 2

Firewall -> NAT -> Outbound -> Mode

(Checklist) Automatic outbound NAT rule generation 

///Then Scroll to the Bottom

Mappings -> Add ->

(No Checklist) "Disabled" 
(No Checklist) "Do not NAT"
(LAN) "Interface"
(IPv4) "Address Family"
(TCP/UDP) "Protocol"
(Any) "Source"
(Any) "Destination"
(No Checklist) "Not"
(Interface Address) "Address"
(No Checklist) "Static Port"
(No Checklist) "No XMLRPC Sync"

-> Save

//// Then Setting The DNS Forwarder

Services -> DNS Forwarder ->

(Checklist) "Enable DNS forwarder"
(53) "Listen Port"
(ALL) "Interfaces"

-> Save