Results 1 to 8 of 8
  1. #1
    Untanglit
    Join Date
    Aug 2019
    Posts
    23

    Default Comma-separated DNS list not allowed

    Hello Untangle Community,

    Is using a comma-separated IP list in the DNS server field no longer supported as stated here?

    https://support.untangle.com/hc/en-u...Server-Entries

    When I attempt this, I receive the error shown below. This occurs when the interface is set to Static or DHCP...

    untangle-dns-list2.jpeg

  2. #2
    Untangle Ninja sky-knight's Avatar
    Join Date
    Apr 2008
    Location
    Phoenix, AZ
    Posts
    26,174

    Default

    No spaces!
    Rob Sandling, BS:SWE, MCP
    NexgenAppliances.com
    Phone: 866-794-8879 x201
    Email: support@nexgenappliances.com

  3. #3
    Untanglit
    Join Date
    Aug 2019
    Posts
    23

    Default

    Quote Originally Posted by sky-knight View Post
    No spaces!
    None - here is the error along with the config pane (image is too large for the forum system)...
    Last edited by czeus; 08-27-2021 at 06:54 PM.

  4. #4
    Untangler
    Join Date
    May 2008
    Posts
    398

    Default

    Put the 8.8.8.8 as the secondary dns.

  5. #5
    Untanglit
    Join Date
    Aug 2019
    Posts
    23

    Default

    Quote Originally Posted by donhwyo View Post
    Put the 8.8.8.8 as the secondary dns.
    Thanks and I do understand that there is a secondary DNS field but this limits the user to having at most 2 DNS servers. Without getting into any debate re: needing 3+ DNS servers, this is a very common feature on FWs. For example, Checkpoint, Sophos (several devices), pfSense + its forks, etc., all have this.

    Further, my goal is to determine if what UT published is accurate - that an IP list can populate the DNS server field much like is allowed in rule definitions.

  6. #6
    Untangler jcoffin's Avatar
    Join Date
    Aug 2008
    Location
    Sunnyvale, CA
    Posts
    9,699

    Default

    Multiple entries on one field were never supported. Oddly the screen capture in the article shows the field red since it is an invalid format.
    Attention: Support and help on the Untangle Forums is provided by
    volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  7. #7
    Untangle Ninja sky-knight's Avatar
    Join Date
    Apr 2008
    Location
    Phoenix, AZ
    Posts
    26,174

    Default

    Yeah I misread that. The GUI doesn't support more than 2 DNS Servers. However, the platform itself suffers no such limitation.

    Untangle uses DNSMasq for DNS and DHCP services.

    As such, you can simply add an arbitrary number of server= directives to supply DNSMasq with any number of DNS servers you require.
    You can also push as many as you want via DHCP option 6, you just have to manually do so.

    Config -> Network -> Advanced -> DHCP & DNS

    You can put...
    Code:
    server=1.1.1.1
    server=2.2.2.2
    server=3.3.3.3
    And DNSMasq will use them. It will have a line for each DNS IP configured on any WAN interface already as well.

    The DNS Override box on each LAN's DHCP scope can accept a comma separated list already. So it's only adding additional DNS servers to the platform that requires the work around. Also, note... Linux doesn't care about interfaces when it comes to DNS servers, so you want to ensure all DNS servers are available via all WANs... if you fail to observe this you will have DNS timeouts. Because again... Linux.
    Aciidsneaker likes this.
    Rob Sandling, BS:SWE, MCP
    NexgenAppliances.com
    Phone: 866-794-8879 x201
    Email: support@nexgenappliances.com

  8. #8
    Untanglit
    Join Date
    Aug 2019
    Posts
    23

    Default

    Quote Originally Posted by sky-knight View Post
    Linux doesn't care about interfaces when it comes to DNS servers
    Nor really should it...

    Given this is Deb, I figured some CLI hack might be required but before heading down that road, I wanted to see if (a) it plain didn't work; and (b) if the UT articles are inaccurate which, as with the many UT wiki articles I've come across recently, appears to be the case...

    As always, thanks for the info...

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2