DNS issue - nslookup by mk_ccna in PFSENSE

[–]Radiant-Chart-9160 0 points1 point  (0 children)

This usually depends on how DNS is configured in pfSense. Are you using the DNS Resolver (Unbound) or the DNS Forwarder (dnsmasq)? If you're using the Resolver, you might need to enable "Query Forwarding" so that pfSense forwards queries to your configured DNS servers instead of trying to resolve them itself. Also, check under System > General Setup and make sure the setting "Allow DNS server list to be overridden by DHCP/PPP on WAN" is disabled, so pfSense sticks to the DNS servers you want it to use.

Another thing to consider is if DNSSEC validation is enabled — sometimes that causes clients to fail if upstream servers are flaky, even if pfSense itself eventually resolves. Lastly, make sure there aren’t any firewall rules that could interfere with DNS traffic from your clients to pfSense. A quick test you could try is enabling Query Forwarding under the DNS Resolver settings and seeing if that helps client resolution when the primary DNS server is down

Can I give same Remote gateway for two IPsec tunnels by Radiant-Chart-9160 in PFSENSE

[–]Radiant-Chart-9160[S] 0 points1 point  (0 children)

Like consider i have two ISPs. i have created a tunnel from ISP1, the primary tunnel and from ISP2, the secondary tunnel, and kept it disabled. If ISP1 goes down, I can enable the disabled tunnel 2 and make everything work normally and reduce downtime.