DNS Resolution in Green Network doesn't work properly

Networking DNS
1

Hey community!
i just installed ipfire.
Everything worked fine except the DNS resolution.
On the console i’m able to ping any domain-names and IPs.
Out of the Green network, i’m only able to ping WAN IPs.
My setup looks like this:

WAN — [FritzBox] — 10.10.10.0/24 — Red [IPFIRE] Green — 10.30.10.0/27— [CLIENTS]

Client Setup:
Gateway - 10.30.10.1/27
DNS Server - ? 10.30.10.1 or 10.10.10.1 ?

Green Interface:
IP: 10.30.10.1/27
DNS Server - 10.10.10.1 (Fritzbox)

Red Interface
IP - 10.10.10.3/24
DNS Server - 10.10.10.1 (Fritzbox)

FritzBox
IP - 10.10.10.1/24

How does a correct DNS Setup look like?
How do i use the DNS i get provided by my ISP?
I want to avoid 8.8.8.8 & 8.8.4.4

Thank you very much in advance!

2

Gateway is wrong. It has to be the IPFire IP. I guess 10.30.10.1

Both should work but i would use 10.30.10.1 becaue IPFire check DNSSec signatures.

There is no way to use it automatic because the Fritzbox doesn’t tell the ISP Servers.

Also keep in mind that IPFre reject to use DNS Servers that not work with DNSSec.
So if your ISP or the Fritzbox doesn’t deliver SIG answers IPFire will not use it.

3

It’s a typo. 10.30.10.1 is configured.

So to be safe, i have to add a Public DNS server manually?

4

On the DNS page in the webgui you can test the servers. If the ISP Servers fail you have to use a public server or remove all server and run unbound in recursor mode.