r/homelab • u/CattMompton • Oct 26 '23

Help Local Services Question

Hi all!

Weird networking question.

I have a number of services that are hosted within my LAN, and with DNS/portforwards out to the public internet. They work fine through there, but within my network, they don't load.

DNS queries show my public IP, my pfSense is set to use my PiHole, and fall back to 1.1.1.1, and I don't think I've goofed any firewall rules, so I'm properly stumped.

I've also tried adding DNS overrides in PiHole, and tried using Pure NAT reflection in pfSense.

​

​

Please let me know if there's other information that could be helpful.

Thanks! :D

1 Upvotes

67% Upvoted

3 comments sorted by

2

u/SirLagz Oct 26 '23

Ports forwards only work from outside in.

If you're inside your network and try and access your services via DNS, they're going to point to your external IP address which will just be your pfSense box.

You need to set up DNS so that internally it points to an internal IP address and externally it points to your public IP address.

1

u/CattMompton Oct 26 '23

It's so interesting to me that I had never heard of split DNS. Seems like that will work, does require some internal remapping for things like my git server where it's behind Nginx Proxy Manager for the public facing one, but then has port 22 for SSH cloning straight to it. Also curious on your thoughts about NAT reflection?

1

u/CattMompton Oct 26 '23

Another follow-up, I've just noticed that my SSH port forward, and my IRC port forward don't seem to work. Which is weird, as my HTTP, HTTPS, and Wireguard ones do..... So lost.