DNS Troubleshooting – Ping Domain from Pfsense but Not Desktop

dnspfsense

I'm setting up Pfsense to replace our existing firewall with. Currently the setup is pretty straight forward.

  • I have internet connected to my wan port
  • connected a switch to the lan port
  • connected my desktop to the switch

I use 1 vlan (10) which is assigned to the lan port. The switch is configured so it handles the vlan correctly. I use (Pfsense) DHCP on the VLAN and my desktop get an ip in the configured range and also the DNS servers on my desktop are correctly set. (8.8.8.8 and 8.8.4.4 by DHCP)
The DNS resolver settings are still default (Enabled, network interfaces all, outgoing network interfaces all) and DNS forwarder is disabled.

My NAT settings are set to Automatically outbound NAT rule generation and i configured a firewall rule on the VLAN to allow all traffic (for test purposes)
enter image description here

I can ping 8.8.8.8 from my desktop AND Pfsense diagnostics.
I cannot ping nu.nl for example from my desktop but i can from Pfsense diagnostics.

Why cant i resolve the domain on my desktop? I think i need to configure an extra firewall rule or something but i have no idea which one as i currently allow all traffic…

Best Answer

I noticed that i only allowed TCP traffic instead of TCP and UDP. I changed my rule to allow TCP and UDP and this solved my problem.