Im trying to setup a DNS record in Opnsense to forward ex:( ***.local.mydomain.com ) to (192.168.1.777(nginx proxy)) but every option in Opnsense that I try it doesn’t forward to my reverse proxy machine.

I have Unbound,AdguardHome and wireguard installed on the Opnsense.

Unbound port is 53 Adguard port is 5353

I tried going to: Services>Dnsmasq DNS>settings>host override, but it didn’t seem to work I also tried logging to AdguardHome>filter>DNS rewrite, but it also didn’t seem to work

What am I doing wrong, when I type (nslookup *.local.mydomain.com) I only get the response “server can’t find *.local.mydomain.com”

Solved!!

In Opnsense I created a rule to forward my domain to an IP. You just need to go to Services>unbound>overrides>host overrides and add your domain

  • citizen@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    1
    ·
    1 year ago

    If you have adguard on port 53 that will be your first hop and main DNS server. If you setup rewrite on adguard to point *.local.my domain.con to 192.168.1.777 that should be good. Next ensure your DHCP server sets correct DNS server for clients.

    https://docs.opnsense.org/manual/dhcp.html

    Next I would ensure that the client you’re testing with is pointing to the adguard DNS. In this case your open sense router on port 53.

    Depending what you’re testing with on Linux you can check /etc/resolv.conf

    You can run dig command to point directly to your adguard server to verify it works and you have connectivity

    dig @192.168.1.1 something.local.my domain.com

    • daruma@social.fossware.spaceOP
      link
      fedilink
      English
      arrow-up
      2
      ·
      edit-2
      1 year ago

      Thank you that was very informative, I went through again and found out that my Unbound is using the port 53 and Adguard is using 5353.

      That means Unbound is the main DNS server on my case. Where would I put my (*.local.domain.com to 192.168.1.**) rule

      edit: I followed a guide on how to install Adguard with unbound. https://youtu.be/7RC7q5WOYC0

      • MangoPenguin
        link
        fedilink
        English
        arrow-up
        1
        ·
        1 year ago

        Since unbound is your primary DNS where clients connect, set the override there.