Bug #15434: DNS Forwarder ignores "Use remote DNS Servers, ignore local DNS" setting - pfSense - pfSense bugtracker

Custom queries

2.4.5-p1 - Resolved/Closed
2.5.0 - Resolved/Closed
2.5.1 - Resolved/Closed
2.5.2 - Resolved/Closed
2.6.0 - Resolved/Closed
2.7.0 - Resolved/Closed
2.7.1 - All Open Issues
2.7.1 - Resolved/Closed
2.7.2 - Resolved/Closed
2.8.0 - All Open Bugs
2.8.0 - All Open Features
2.8.0 - All Open Issues
2.8.0 - All Open Regressions
2.8.0 - Feedback
2.8.0 - Needs Attention
2.8.0 - New/Confirmed
2.8.0 - Pull Requests
2.8.0 - Regressions affecting 2.7.0
2.8.0 - Resolved/Closed
21.02.2/2.5.1 - Resolved/Closed
21.05 Plus - All Closed Issues
21.05.1 Plus Target - All Closed Issues
21.05.1 Target - All Closed Issues
22.01 Plus - All Closed Issues
22.01 Target - All Closed Issues
22.05 Plus - All Closed Issues
22.05 Target - All Closed Issues
23.01 Plus - All Closed Issues
23.01 Target - All Closed Issues
23.05 Plus - All Closed Issues
23.05 Target - All Closed Issues
23.05.1 Plus - All Closed Issues
23.05.1 Target - All Closed Issues
23.09 Plus - All Closed Issues
23.09 Target - All Closed Issues
23.09.1 Plus - All Closed Issues
23.09.1 Target - All Closed Issues
24.03 Plus - All Closed Issues
24.03 Target - All Closed Issues
24.11 Plus - All Closed Issues
24.11 Target - All Closed Issues
25.01 Plus - All Closed Issues
25.01 Plus - All Open Issues
25.01 Plus - Feedback Issues
25.01 Plus - Needs Attention/Work
25.01 Plus - New/Confirmed/In Progress Issues
25.01 Plus - Pull Request Review
25.01 Plus - Waiting on Merge
25.01 Target - All Closed Issues
25.01 Target - All Open Issues
All Open Issues assigned to Me
All Open Pull Requests
Any Target - All Open Regressions
Any Target - Feedback Issues
CE-Next - All Closed Issues (Move to specific target)
CE-Next - All Open Issues
CE-Next - Feedback (Likely needs target changed)
New Issues by Category - Future Target
New Issues by Category - No Target
New Issues by Category - No Target+Future
No Target - All Open Issues (Base Only)
No Target - New Issues (Base Only)
No Target - New Issues (Base and Packages)
Release Notes - Plus Target Version (DO NOT EDIT)
Release Notes - Target Version (DO NOT EDIT)

Actions

Copy link

Bug #15434

closed

DNS Forwarder ignores "Use remote DNS Servers, ignore local DNS" setting

Added by aleksei prokofiev 7 months ago. Updated about 2 months ago.

Status:

Resolved

Priority:

Normal

Assignee:

Jim Pingle

Category:

DNS Forwarder

Target version:

2.8.0

Start date:

Due date:

% Done:

100%

Estimated time:

Plus Target Version:

24.11

Release Notes:

Default

Affected Version:

Affected Architecture:

Description

In General Setup if use option "Use remote DNS Servers, ignore local DNS" the DNS Forwarder still try to use local DNS. If this is expected behavior, the docs should be corrected.
The docs says "This option forces the firewall to use the DNS servers configured on this page or from dynamic WANs and it will not utilize the local DNS Resolver or DNS Forwarder."
Tested on 23.09.1 and 24.03

Files

Download all files

resolver.png (32.8 KB) resolver.png		aleksei prokofiev, 04/24/2024 05:20 PM
forwarder.png (29.3 KB) forwarder.png		aleksei prokofiev, 04/24/2024 05:20 PM

History
Notes
Property changes
Associated revisions

Actions

Copy link

Updated by Jim Pingle 7 months ago

Status changed from New to Not a Bug

I can't reproduce that here.

Before:

: cat /etc/resolv.conf 
nameserver 127.0.0.1
nameserver ::1
nameserver 198.51.100.1
nameserver 2001:db8::1
nameserver 2001:4860:4860::8844
nameserver 2001:4860:4860::8888
nameserver 8.8.8.8
nameserver 8.8.4.4

After:

: cat /etc/resolv.conf
nameserver 198.51.100.1
nameserver 2001:db8::1
nameserver 2001:4860:4860::8844
nameserver 2001:4860:4860::8888
nameserver 8.8.8.8
nameserver 8.8.4.4

It appears to be working as expected.

Actions

Copy link

Updated by Danilo Zrenjanin 7 months ago

I can replicate this issue. It's present only when you disable unbound and enable the forwarder(dnsmasq).

Use remote DNS Servers, ignore local DNS option is selected under System/General Setup

cat /etc/resolv.conf
nameserver 127.0.0.1
nameserver ::1
nameserver 172.21.10.4

Actions

Copy link

Updated by Jordan G 7 months ago

same behavior on my edge when switching to forwarder

nameserver 127.0.0.1
nameserver ::1
nameserver 192.168.3.1
nameserver 192.168.3.2

Actions

Copy link

Updated by Jim Pingle 7 months ago

Project changed from pfSense Plus to pfSense
Subject changed from For some reason with enabled "Use remote DNS Servers, ignore local DNS", the DNS Forwarder still try to use local DNS. to DNS Forwarder ignores "Use remote DNS Servers, ignore local DNS" setting
Category changed from DNS Forwarder to DNS Forwarder
Status changed from Not a Bug to In Progress
Assignee set to Jim Pingle
Target version set to 2.8.0
Affected Plus Version deleted (~~24.03~~)
Plus Target Version set to 24.07

OK, I can also reproduce this with the DNS Forwarder. I also have a fix coming. Looks like some parenthesis around the tests involved were slightly wrong.

Actions

Copy link

Updated by Jim Pingle 7 months ago

Status changed from In Progress to Feedback
% Done changed from 0 to 100

Applied in changeset 247909ff5387200fb31c76f13e7702a8fbdc06f4.

Actions

Copy link

Updated by dylan mendez 7 months ago

This patch seems to work, however, I had to manually re-save the config on the General Setup page for the changes to resolv.conf to push, even though it was selected to "Use Remote DNS Servers, ignore local DNS" already. Tested on 2.7.2 and 24.03-release.

Actions

Copy link

Updated by Jim Pingle 7 months ago

Status changed from Feedback to Resolved

dylan mendez wrote in #note-6:

This patch seems to work, however, I had to manually re-save the config on the General Setup page for the changes to resolv.conf to push, even though it was selected to "Use Remote DNS Servers, ignore local DNS" already. Tested on 2.7.2 and 24.03-release.

That's expected, either re-save there or reboot since applying the patch wouldn't automatically regenerate the resolv.conf file, something else would have to trigger that.

Actions

Copy link