External Custom Domain inside LAN

[matthewcaley]

I have an external custom domain, mydomain.com, which points to my public IP address, which is dynamically updated from my server, which has my reverse proxy installed (Caddy) that tells the traffic where to go based on the subdomain.

Ports 80 and 443 are forwarded at the router to the server, and I have all the various CNAME records set up with the registrar for the various subdomains that correspond to my reverse proxy config (Caddyfile).

All of this works beautifully when I'm not on my LAN (or when I'm on my LAN using Tor or a VPN); for example, going to emby.mydomain.com brings up Emby, going to tv.mydomain.com brings up Sonarr, etc.

When I'm on my LAN, all those URLs redirect to my router login page. I cannot for the life of my figure out how to get this to work. I'm also using unbound, in addition to pihole and the Caddy reverse proxy.

I do not care about accessing it via my-server-name. I want to use the custom domain.

Any help is much appreciated.

[deHakkelaar]

Depending router implementation, probably the router is only port forwarding traffic coming in via the router's WAN interface and not when coming in via the LAN interface.

Using Pi-hole with a public dns domain

None. Its just a name. Make sure to change hostname for Pi-hole to reflect FQDN eg: Create DNS records at your DNS registrar that needs to resolve for the public. Create DNS records on Pi-hole that needs to resolve private @ home. For mail, youd have to create an MX record that points to the server thats processing mail for your domain eg: pi@noads:~ $ host -t mx dehakkelaar.nl dehakkelaar.nl mail is handled by 10 mail.dehakkelaar.nl. Ps. pi@noads:~ $ hostname -f noads.dehakkelaar.nl …

[matthewcaley]

How do I confirm that this is happening? Is there any way to trace this? Because everything that comes close to resembling any setting like this on my router/modem is enabled.

[deHakkelaar]

Its already confirmed by you seeing the router web page instead of getting routed to the internal LAN IP's.

EDIT: You would want to check the routing table on the router somehow.

[matthewcaley]

Yesterday, I added 3 lines to my pi-hole.conf file in unbound:

private-domain: mydomain.com
local-zone: "mydomain.com" redirect
local-data: "mydomain.com A server_LAN_IP"

and after restarting unbound, it worked! Then this morning it stopped working.

[deHakkelaar]

Your clients might be bypassing your Unbound setup by having another DNS server configured.
For Windows clients, you can check DNS servers assigned, and by whom, with below one in a CMD prompt:

ipconfig /all | findstr "Server"

For Linux and MacOS clients, below might reveal if not have a local caching DNS service running:

cat /etc/resolv.conf

Testing on a client can be done with the nslookup tool (Windows/Linux/MacOS).
Below 10.0.0.2 = Pi-hole @ my place:

C:\Users\deHakkelaar> nslookup pi.hole 10.0.0.2
Server:  noads.dehakkelaar.nl
Address:  10.0.0.2

Name:    pi.hole
Address:  10.0.0.2

[matthewcaley]

nslookup for *.mydomain.com returns my public WAN IP, where * is any of the CNAMEs I have registered with the DNS of mydomain.com registrar.

[deHakkelaar]

Looks like Unbound is bypassed and you get the public records returned.
Pi-hole has got their own Unbound setup guide and use dig instead of nslookup to test:

https://docs.pi-hole.net/guides/unbound/#setting-up-pi-hole-as-a-recursive-dns-server-solution

Try go through that before try creating those local A records etc.
Am unfamiliar with Unbound's syntax for creating local records so cant help you with that.

[matthewcaley]

That's the guide I used from day 1.

I did a dig for emby.mydomain.com (listed in the question section), the answer section says:

emby.mydomain.com 60 IN CNAME mydomain.com
mydomain.com 60 IN A my_public_WAN_IP

[deHakkelaar]

Can you copy past output for below instead of pasting the screenshots ?
Easier for you to redact and for us to read/copy/paste.
Can enclose with the </> button while entering here.
Replace mydomain.com with actual one oc.

dig +short @127.0.0.1 -p 5353 mydomain.com

dig +short @127.0.0.1 chaos txt servers.bind

[matthewcaley]

@deHakkelaar

dig +short @127.0.0.1 -p 5353 mydomain.com

internal_server_IP

@deHakkelaar

dig +short @127.0.0.1 chaos txt servers.bind

"internal_router_IP#53 62 6" "127.0.0.1#5353 2623 790"

[deHakkelaar]

@matthewcaley

dig +short @127.0.0.1 chaos txt servers.bind
internal_router_IP#53

Thats probably the bypass.
Pi-hole should have only one upstream custom DNS server configured 127.0.0.1#5353 according to the official guide !

[matthewcaley]

Found the issue. I had conditional formatting set up in pihole with internal_router_IP to mylandomain. I think the problem was that in my router settings, I put mylandomain to match mydomain.com, including the .com part (thought I'm not using .com). So I had it set that mylandomain = mydomain.com. Same exact strings. Removing the conditional forwarding in the pihole fixed it.

[deHakkelaar]

Cheers!

[matthewcaley]

I didn't realize I wasn't allowed to do what I did. I'm new to this, as you can tell.

[deHakkelaar]

Well now your the expert