Re: [pfSense] Disable DHCP domain-name request

[Marco]

On Mon, 23 Nov 2015 15:44:42 -0800
Dave Warren  wrote:

> > Delete all leases from Status -> DHCP leases, restart dhcp service
> > and retry ...  
> 
> That's not necessary and would be incorrect behaviour if it were 
> happening. I just confirmed here with my pfSense installation, new 
> options are applied without removing the old lease in all expected 
> cases, including the Domain Name field.

Thanks for confirming.

> I tested via a Domain Name change against an automatic renewal and 
> manual renewal, as well as a "release/renew" cycle; in all cases the 
> client was aware of the new settings immediately after the DHCP 
> operation completed.
> 
> Now admittedly some broken clients won't reflect all changes 
> immediately; some of our VoIP phones will update DNS servers as soon
> as they renew, but won't update timezone information until the next
> reboot, but this is a client deficiency and nothing you do in pfSense
> (including removing the old lease) will make a difference, and it
> only causes issues on specific hardware, but if you capture and
> analyze the packets, you'll see correct data was sent by the DHCP
> server.

Thanks for the thorough answer. It seems it's not pfSense that is at
fault, but the client itself. I'll fire up wireshark and check
what's being transmitted to confirm.

Marco
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold

Re: [pfSense] Disable DHCP domain-name request

[Marco]

On Wed, 25 Nov 2015 07:58:38 +0100
Marco  wrote:

> Thanks for the thorough answer. It seems it's not pfSense that is at
> fault, but the client itself. I'll fire up wireshark and check
> what's being transmitted to confirm.

Indeed, the correct domain is passed to the client. That confirms
it's a client issue and has nothing to do with pfSense.

Thanks for the quick and professional help and the pointer into the
right direction.

Marco
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold

Re: [pfSense] Disable DHCP domain-name request

[Dave Warren]

On 2015-11-22 22:51, Nicola Ferrari (#554252) wrote:

Hi, marco?
Did you remove old dhcp leases on pfsense?

If you renew dhcp request on an already present client (in dhcp 
leases), the client will use the old lease (and all its options), so 
you'll not see your new configurations reflected.


Delete all leases from Status -> DHCP leases, restart dhcp service and 
retry ...


That's not necessary and would be incorrect behaviour if it were 
happening. I just confirmed here with my pfSense installation, new 
options are applied without removing the old lease in all expected 
cases, including the Domain Name field.


I tested via a Domain Name change against an automatic renewal and 
manual renewal, as well as a "release/renew" cycle; in all cases the 
client was aware of the new settings immediately after the DHCP 
operation completed.


Now admittedly some broken clients won't reflect all changes 
immediately; some of our VoIP phones will update DNS servers as soon as 
they renew, but won't update timezone information until the next reboot, 
but this is a client deficiency and nothing you do in pfSense (including 
removing the old lease) will make a difference, and it only causes 
issues on specific hardware, but if you capture and analyze the packets, 
you'll see correct data was sent by the DHCP server.


--
Dave Warren
http://www.hireahit.com/
http://ca.linkedin.com/in/davejwarren


___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold

Re: [pfSense] Disable DHCP domain-name request

[Nicola Ferrari (#554252)]

Hi, marco?
Did you remove old dhcp leases on pfsense?

If you renew dhcp request on an already present client (in dhcp leases), 
the client will use the old lease (and all its options),  so you'll not 
see your new configurations reflected.


Delete all leases from Status -> DHCP leases, restart dhcp service and 
retry ...


N

Il 21/11/2015 17:15, Marco ha scritto:

On Fri, 20 Nov 2015 15:23:20 -0700
WebDawg  wrote:


Where does it appear?


E.g. on the WLAN connected hosts. The pfSense box itself has the
correct domain name.


You can specify domain names on each interface served by the
pfSense DHCP server...


I have set the domain name in System → General Setup and also in the
DHCP server setting, which seems redundant. However, on a connected
host the full qualified domain name is still set to the ISP provided
domain name. Running “hostname” on the pfSense box returns the
correct one, though.

Marco
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold




--
+-+
| Linux User  #554252 |
+-+

___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold

Re: [pfSense] Disable DHCP domain-name request

[Marco]

On Fri, 20 Nov 2015 13:15:58 -0500
Moshe Katz  wrote:

> As far as I can tell, if you set a domain name manually in "System:
> General Setup", pfSense will ignore any domain name that comes back
> with the DHCP request.

I have set the domain name there. It seems redundant, but I've also
set the domain name in the DHCP server setting. However, on a
connected host the full qualified domain name is still set to the
ISP provided domain name. Running “hostname” on the pfSense box
returns the correct one, though.

Marco
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold

Re: [pfSense] Disable DHCP domain-name request

[Marco]

On Fri, 20 Nov 2015 15:23:20 -0700
WebDawg  wrote:

> Where does it appear?

E.g. on the WLAN connected hosts. The pfSense box itself has the
correct domain name.

> You can specify domain names on each interface served by the
> pfSense DHCP server...

I have set the domain name in System → General Setup and also in the
DHCP server setting, which seems redundant. However, on a connected
host the full qualified domain name is still set to the ISP provided
domain name. Running “hostname” on the pfSense box returns the
correct one, though.

Marco
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold

Re: [pfSense] Disable DHCP domain-name request

[Moshe Katz]

As far as I can tell, if you set a domain name manually in "System: General
Setup", pfSense will ignore any domain name that comes back with the DHCP
request.

I have not exhaustively tested that or seen it documented anywhere, but it
seems to be the case on the one of my pfSense boxes that receives a domain
name in the DHCP response.

Moshe

--
Moshe Katz
-- mo...@ymkatz.net
-- +1(301)867-3732

On Fri, Nov 20, 2015 at 4:05 AM, Marco  wrote:

> We receive the interface network configuration on the WAN via DHCP.
> This works, however somehow our ISP or the modem pushes a domain
> name to the pfSense box which is undesirable.
>
> I assume that the DHCP client requests the domain name. I have set
> our domain name in
>
>   System → General Setup → Domain
>
> But it still keeps appearing in the network. So the solution would
> be to remove the “domain-name” part from the requests list. There is
> the form field
>
>   Interfaces → WAN → DHCP client configuration → Advanced → Request Options
>
> What I want to do is to remove “domain-name” from this list. But
> it's empty. Therefore I assume it's using some default values.
>
> How can I remove the “domain-name” from the DHCP request list
> without altering anything else? Or if this is the wrong approach,
> how to ignore the domain being pushed on the network by the ISP?
>
> Marco
> ___
> pfSense mailing list
> https://lists.pfsense.org/mailman/listinfo/list
> Support the project with Gold! https://pfsense.org/gold
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold

Re: [pfSense] Disable DHCP domain-name request

[WebDawg]

On Fri, Nov 20, 2015 at 2:05 AM, Marco  wrote:
> We receive the interface network configuration on the WAN via DHCP.
> This works, however somehow our ISP or the modem pushes a domain
> name to the pfSense box which is undesirable.
>
> I assume that the DHCP client requests the domain name. I have set
> our domain name in
>
>   System → General Setup → Domain
>
> But it still keeps appearing in the network. So the solution would
> be to remove the “domain-name” part from the requests list. There is
> the form field
>
>   Interfaces → WAN → DHCP client configuration → Advanced → Request Options
>
> What I want to do is to remove “domain-name” from this list. But
> it's empty. Therefore I assume it's using some default values.
>
> How can I remove the “domain-name” from the DHCP request list
> without altering anything else? Or if this is the wrong approach,
> how to ignore the domain being pushed on the network by the ISP?
>
> Marco
> ___

Where does it appear?  You can specify domain names on each interface
served by the pfSense DHCP server...
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold