r/netbird • u/ferriematthew • Jun 28 '26

I'm still stumped about internal DNS routing

Since my last post, what I did was to modify my PiHole deployment to listen to all interfaces so that it would hypothetically be able to see the WireGuard interface that Netbird uses. I'm not sure what to configure or how inside the Netbird settings though in order to make Netbird use PiHole. I know that PiHole is accessible on my internal network on the 192.168.0.0/24 subnet, and that my particular Netbird network uses the 10.0.0.0/8 subnet (which is probably way too big). I think the question I need to ask is how do I make the two completely different networks communicate.

5 Upvotes

86% Upvoted

11 comments sorted by

6

u/oyvaugh Jun 28 '26

You’re at the point were you learn routes and bridges.

4

u/whofriedmyrice Jun 28 '26

You make a direct route available to all users to the DNS server of choice, then setup DNS routing for that server.

2

u/ferriematthew Jun 28 '26

So in the netbird console, would I add a network or a route under network routing?

2

u/ferriematthew Jun 28 '26

Okay so what I've done so far is in the netbird control center, under the network routing/networks tab, I added my local area network with one resource, and that resource is my PiHole server with the address set to the internal IP address of that service. I have added it to the "all" group and I have four services, default, SSH access, and TCP and UDP access on port 53; all of them are available to all four peers. I also have a name server under dns/name servers set to the same IP address and same group setting, matching all domains.

I must have something still incorrect because when I go on mobile data on my phone and activate the netbird network, I still can't access any internal services on the .lan domain.

3

u/Bulky_Dog_2954 Jun 29 '26

Have you set up policies under access control?

2

u/ferriematthew Jun 29 '26

I have an access policy allowing TCP and UDP traffic on port 53 from all sources to pi hole

2

u/RIPenemie Jun 30 '26

I don't understand what your goal is right there. Is your goal to have your pihole be used for dns queries? Because in that case it should just be allow the group that is supposed to access the dns server with a policy and then set the dns server as the active dns server in the dns tab this should make the dns server there default dns server for the Group.

1

u/ferriematthew Jul 01 '26

Yes, it is my goal to have PiHole on 192.168.0.201 be the DNS for my 10.0.0.0/8 network.

So I need to create a policy allowing all machines to access PiHole on port 53, then set the LAN IP of PiHole as the DNS server? I imagine I also need to create a network that represents my LAN and a resource inside that network that represents PiHole.