[PacketFence-users] dns filter not working with inline deployment

[Cristian M. <c.m...@ap...>]

PF Version: 9.3 (ZEN)
I have 3 nics:
eth0: 192.168.50.9/24 (management)
eth1: 192.168.11.100/24 (outside network)
eth2: 192.168.10.254/24 (inline, portal)

gw: 192.168.11.254
inline snat interface: eth1
portal fqdn: nac.mydomain.tld

When clients connect to the inline network they get redirected to the 
portal and can register. Unfortunately since we use email activation 
they need to access the portal even after registration to confirm the link.
Since nac.mydomain.tld is not resolvable from internet I created an 
entry in dns_filters.conf:

[portal]
filter = qname
operator = is
value = nac.mydomain.tld
[1:portal]
scope = inline
answer = 30 IN A 192.168.10.254
rcode = NOERROR

But after registration i can't resolve the record anymore and I get NXDOMAIN

As a workaround I modified pfdns.conf:
...
[% inline %]
         hosts {
             192.168.10.254 nac.mydomain.tld  <---
             fallthrough
         }
...

Am I missing something??

-- 

*Cristian Mammoli*
Network and Computer Systems Administrator

T.+39 0731719822
www.apra.it <https://www.apra.it>

Apra Spa
<https://www.apra.it/>
linksocial

*Avviso sulla tutela di informazioni riservate.* Questo messaggio è 
stato spedito da Apra spa o da una delle aziende del Gruppo. Esso e gli 
eventuali allegati, potrebbero contenere informazioni di carattere 
estremamente riservato e confidenziale. Qualora non foste i destinatari 
designati, vogliate cortesemente informarci immediatamente con lo stesso 
mezzo ed eliminare il messaggio e i relativi eventuali allegati, senza 
trattenerne copia.