DNS test fails on dual WAN with Unbound

Follow

Lucas Van Drunen

• May 02, 2023 17:34
• Edited

Hello - I have tried a few times to configure a failover wireless WAN on my Firewalla Purple. Each time I can successfully add the backup network, but immediately after provisioning, my primary WAN fails a DNS test and is taken offline. To restore internet I have to delete my failover WAN, after which my primary WAN is able to resolve DNS. I have the default site for DNS testing (github), and I am using the Unbound DNS service for my network. Is this a known issue?

0

• 

  Firewalla

  • May 03, 2023 03:10
  • Edited

  The WAN DNS test is based on the DNS server settings on your WAN (not unbound). Are you using any filtering DNS under the WAN? or is it ISP default?

  Also, does your ISP/country filter DNS?

  0

  Comment actions Permalink
• 

  Lucas Van Drunen

  • May 03, 2023 16:33

  Thank you for your response. I had left the DNS servers blank on my primary WAN config, and it looks like it was defaulting to my Firewalla IP on the LAN side. I specified primary/secondary DNS servers for the WAN and that solved the issue.

  0

  Comment actions Permalink
• 

  Firewalla

  • May 03, 2023 16:48

  Are you in a country that may filter DNS? it is pretty abnormal for an ISP filter github.com 

  0

  Comment actions Permalink
• 

  Lucas Van Drunen

  • May 03, 2023 17:16

  I am located in the USA

  0

  Comment actions Permalink
• 

  Firewalla

  • May 04, 2023 03:36

  Do you remember what your DNS server address was? we have never seen any DNS server in the USA filtering github.com and not answering DNS for it. Want to take a note, in case we run into this in the future

  0

  Comment actions Permalink
• 

  Lucas Van Drunen

  • May 04, 2023 12:33

  when I left the DNS servers blank on my WAN, they defaulted to my Firewalla's LAN IP address

  0

  Comment actions Permalink
• 

  Firewalla

  • May 04, 2023 16:01

  Your LAN side will always get the firewalla as your DNS server by default. Anyway, if you can't get the DNS is fine, we are just a bit puzzled on why a ISP filter github.com DNS requests ... 

  0

  Comment actions Permalink

Please sign in to leave a comment.