Few questions about DNS resolver
-
Hello,
-I'm using dns resolver to filter with pfblockerng in pfsense. (I've added a rule to deny other dns requests) but dns resolver may stop from time to time. In this case, no one can access the sites.
is there a way to get around this?- Is dns resolver required for filtering at the application layer (eg pfblockerng)
Can't I do this job using public DNS?
-If it is necessary to use DNS resolver, what rule should I add so that users can access the internet when DNS resolver does not work/stops or restarts?
-How can it do without DNS resolver in firewalls running at the application layer. Or are they actually using DNS forwarding/resolve?
-Does DNS resolver or DNS forwarder make more sense?
The community that makes pfsens love, thanks in advance for your answers. :)
- Is dns resolver required for filtering at the application layer (eg pfblockerng)
-
@enesas said in Few questions about DNS resolver:
Is dns resolver required for filtering at the application layer (eg pfblockerng)
Can't I do this job using public DNS?DNSResolver (unbound) is using public DNS - it uses the DNS root servers to do the checking.
-
@enesas Resolver is needed for pfBlocker DNSBL but not block feeds.
What is shown in the system or Resolver log when it stops? It should not stop/die, but may restart occasionally especially if you have DHCP set to register hostnames in DNS.
Forwarder only sends queries on to the configured DNS servers.
-
@steveits @rcoleman-netgate
I recently had a DNS resolver that restarts in 1-2 hours. Many people were victims until we solved it. Latest pflockerng > dnsbl > Resolver Live Sync
Checking the feature fixed the problem. Of course it took time to find it.These and similar problems can happen from time to time. that's why I asked.