Project

General

Profile

Actions
Copy link

Bug #3529

closed

Cannot resolve certain addresses using DNS Forwarder; public DNS it forwards to is fine

Added by David Pfeffer over 11 years ago. Updated over 11 years ago.

Status:
Rejected
Priority:
High
Assignee:
-
Category:
DNS Forwarder
Target version:
-
Start date:
03/19/2014
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
Affected Architecture:

Description

The following address is an example of an A record that I cannot resolve using the pfSense DNS forwarder:

ffazva-es001-01.internal.funnelfire.com

I'm forwarding to 8.8.8.8 (Google DNS). Using nslookup directly against 8.8.8.8 shows that the server can resolve that address, but for some reason the DNS forwarder is unable to do so.

Actions
Copy link
 #1

Updated by Jim Pingle over 11 years ago

  • Status changed from New to Rejected

You have DNS Rebinding protection enabled (System > Advanced, Admin tab). The A record for ffazva-es001-01.internal.funnelfire.com returns an RFC1918 response, 172.18.0.9, which is denied by default with DNS Rebinding protection active.

Actions
Copy link

Also available in: Atom PDF