Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    [Feature] Unbound Dns request.

    Scheduled Pinned Locked Moved General pfSense Questions
    29 Posts 9 Posters 2.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • E
      e0x @RobbieTT
      last edited by

      @RobbieTT said in [Feature] Unbound Dns request.:

      @e0x said in [Feature] Unbound Dns request.:

      https://github.com/NLnetLabs/unbound

      Not sure what you are asking here as Unbound is clearly baked-in to pfSense. Do you think there is a feature missing from pfSense's Unbound that is present in the GitHub repository version?

      The DNS Resolver in pfSense® software utilizes unbound, which is a validating, recursive, caching DNS resolver that supports DNSSEC, DNS over TLS, and a wide variety of options. It can act in either a DNS resolver or forwarder role.

      https://docs.netgate.com/pfsense/en/latest/services/dns/resolver-config.html

      ☕️

      And thinking about this, is a bad idea if the dns resolver have some lists to block ads a so on?

      johnpozJ RobbieTTR 2 Replies Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator @e0x
        last edited by

        @e0x huh? Not sure what your saying is a bad idea? Unbound?

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        GertjanG 1 Reply Last reply Reply Quote 1
        • RobbieTTR
          RobbieTT @e0x
          last edited by

          @e0x said in [Feature] Unbound Dns request.:

          ☕️

          And thinking about this, is a bad idea if the dns resolver have some lists to block ads a so on?

          I know you aimed this at me but I have no idea what you are on about. I mean, literally no idea at all.

          ☕️

          1 Reply Last reply Reply Quote 1
          • GertjanG
            Gertjan @johnpoz
            last edited by

            @johnpoz

            Just wait. He not yet aware that pfSense has pfBlockerng.

            No "help me" PM's please. Use the forum, the community will thank you.
            Edit : and where are the logs ??

            1 Reply Last reply Reply Quote 1
            • E
              e0x
              last edited by

              😁 Sorry for my bad English, I write without translator.

              I mean to say, if the DNS resolver have an option that includes lists to blocks ads, malware, etc., via DNS without necessary to install any other package for this purpose.

              johnpozJ 1 Reply Last reply Reply Quote 0
              • stephenw10S
                stephenw10 Netgate Administrator
                last edited by

                You can add lists directly as custom config in Unbound. But it's a lot easier using pfBlockerNG!

                1 Reply Last reply Reply Quote 1
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator @e0x
                  last edited by

                  @e0x said in [Feature] Unbound Dns request.:

                  if the DNS resolver have an option that includes lists to blocks ads

                  It does.. but you would have to do some manual work.. Couple different ways to do it - you can just create a host override for what you want to block..

                  you can create a redirect entry if you want to block anything for a whole domain. Or a always_nxdomain or always null, there are few options... Vs putting all of them in the custom options box, you can load from a file, etc.

                  But if your desire it to do dns blocking - the pfblocker makes it much easier to do..

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                  E 1 Reply Last reply Reply Quote 1
                  • E
                    e0x @johnpoz
                    last edited by

                    @johnpoz Any way to block first party ads like Yuotube? I have pfBleckerNG, but is not sufficient.

                    I hate to see this XD
                    Captura de pantalla 2023-08-25 103735.png

                    Well thanks to all.

                    johnpozJ GertjanG 2 Replies Last reply Reply Quote 0
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator @e0x
                      last edited by

                      @e0x blocking youtube ads can be a bit more complicated than blocking adserver.domain.tld

                      Not really a youtube user, not like I don't ever view youtube stuff - but I have not noticed enough ads that took me out of my way to blocking anything specific. Not exactly sure what your wanting to block there..

                      Are you wanting to block what you tube recommends?

                      blockyoutube.jpg

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                      E 1 Reply Last reply Reply Quote 0
                      • E
                        e0x @johnpoz
                        last edited by

                        @johnpoz said in [Feature] Unbound Dns request.:

                        Are you wanting to block what you tube recommends?

                        No, I post the screenshot that shows the ads what I see when open YouTube. You don't have these ads.

                        II know is easier to use an addon in the browser. Well i suppose I have more nothing to say about this topic so thanks to all you guys.

                        All the best.

                        johnpozJ NollipfSenseN 2 Replies Last reply Reply Quote 0
                        • johnpozJ
                          johnpoz LAYER 8 Global Moderator @e0x
                          last edited by johnpoz

                          @e0x said in [Feature] Unbound Dns request.:

                          You don't have these ads.

                          No I do not think so - I posted what I see when I go to where I think your going.. But again not really a huge youtube guy ;)

                          I get the Star trek and dead stuff it showing - as related to stuff I might view on youtube - the weird al stuff is a mystery to me why its showing that ;)

                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                          If you get confused: Listen to the Music Play
                          Please don't Chat/PM me for help, unless mod related
                          SG-4860 24.11 | Lab VMs 2.8, 24.11

                          1 Reply Last reply Reply Quote 0
                          • NollipfSenseN
                            NollipfSense @e0x
                            last edited by

                            @e0x said in [Feature] Unbound Dns request.:

                            You don't have these ads.

                            I use pfBlockerNG as well as browser ad blocking add on...I don't get any ads. However, if I watch YouTube on Android TV box, no way to block the ads so that device is rarely used.

                            pfSense+ 23.09 Lenovo Thinkcentre M93P SFF Quadcore i7 dual Raid-ZFS 128GB-SSD 32GB-RAM PCI-Intel i350-t4 NIC, -Intel QAT 8950.
                            pfSense+ 23.09 VM-Proxmox, Dell Precision Xeon-W2155 Nvme 500GB-ZFS 128GB-RAM PCIe-Intel i350-t4, Intel QAT-8950, P-cloud.

                            M 1 Reply Last reply Reply Quote 0
                            • M
                              mcury Rebel Alliance @NollipfSense
                              last edited by

                              @NollipfSense said in [Feature] Unbound Dns request.:

                              browser ad blocking add on

                              uBLock Origin default settings + oisd big list is pretty good..

                              dead on arrival, nowhere to be found.

                              johnpozJ NollipfSenseN 2 Replies Last reply Reply Quote 1
                              • johnpozJ
                                johnpoz LAYER 8 Global Moderator @mcury
                                last edited by

                                I use ublock as well - not sure exactly what lists I am using.. They would prob just be the default ones, might have checked to use other lists it presents as options. But have not gone out of my way to add any sort of lists to it. Mostly because I don't really see any ads, so no reason to look for other lists, I do have some of my own filters in ubo, to get rid of stuff that bugs me mostly. The picker option in ubo is great to get rid of unwanted stuff on sites, even when not actually "ads"..

                                That with pihole - I rarely see any sort of ads that is for sure.

                                An intelligent man is sometimes forced to be drunk to spend time with his fools
                                If you get confused: Listen to the Music Play
                                Please don't Chat/PM me for help, unless mod related
                                SG-4860 24.11 | Lab VMs 2.8, 24.11

                                M 1 Reply Last reply Reply Quote 0
                                • NollipfSenseN
                                  NollipfSense @mcury
                                  last edited by NollipfSense

                                  @mcury said in [Feature] Unbound Dns request.:

                                  uBLock Origin default settings + oisd big list is pretty good..

                                  I rely on pfBlockerNG more than the browser add on...the add on were there before I discovered pfSense and I just left it in place. The real deal is pfBlockerNG as affirmed by others in the thread.

                                  pfSense+ 23.09 Lenovo Thinkcentre M93P SFF Quadcore i7 dual Raid-ZFS 128GB-SSD 32GB-RAM PCI-Intel i350-t4 NIC, -Intel QAT 8950.
                                  pfSense+ 23.09 VM-Proxmox, Dell Precision Xeon-W2155 Nvme 500GB-ZFS 128GB-RAM PCIe-Intel i350-t4, Intel QAT-8950, P-cloud.

                                  M 1 Reply Last reply Reply Quote 0
                                  • M
                                    mcury Rebel Alliance @johnpoz
                                    last edited by

                                    @johnpoz Default settings is good enough already..
                                    Check what they are doing at https://oisd.nl/ , nice mix of lists..

                                    dead on arrival, nowhere to be found.

                                    1 Reply Last reply Reply Quote 0
                                    • M
                                      mcury Rebel Alliance @NollipfSense
                                      last edited by

                                      @NollipfSense said in [Feature] Unbound Dns request.:

                                      The real deal is pfBlockerNG as affirmed by others is the thread.

                                      I'm no longer using DNSBL feature in pfblockerNG, not saying that is not good, it is.
                                      But for my environment, only a browser plugin is enough.
                                      My IOT devices are getting ADs anyway..

                                      dead on arrival, nowhere to be found.

                                      1 Reply Last reply Reply Quote 1
                                      • GertjanG
                                        Gertjan @e0x
                                        last edited by

                                        @e0x said in [Feature] Unbound Dns request.:

                                        Any way to block first party ads like Yuotube

                                        When you watch Youtube using a web browser, you're loading a html page, right ?
                                        Take a look at that page, not with your browser but with the dev mode page view : you see the 'code'.

                                        [ a very long time later ]

                                        Now you know how it works.
                                        In short : the add reserved on a place on the actual page has to be loaded and shown. If that went well, and all content that Youtube want's to show you, you get a bonus : the actual video is shown.
                                        The slightest issue ? easy => No video.

                                        Youtube is a big company. (the biggest ?)
                                        They hired the best. With just one reason in mind : protecting their revenue, as they don't care at all that you watch video's, they do it for the money. But you shall watch the adds, because that's what makes their $$$$.

                                        A simple solution exists. I use it. About 5 $ a month. For 5 persons you know, no more adds.

                                        No "help me" PM's please. Use the forum, the community will thank you.
                                        Edit : and where are the logs ??

                                        M 1 Reply Last reply Reply Quote 2
                                        • M
                                          michmoor LAYER 8 Rebel Alliance @Gertjan
                                          last edited by michmoor

                                          @Gertjan said in [Feature] Unbound Dns request.:

                                          A simple solution exists. I use it. About 5 $ a month. For 5 persons you know, no more adds.

                                          I got premium. Really the best decision to make

                                          Firewall: NetGate,Palo Alto-VM,Juniper SRX
                                          Routing: Juniper, Arista, Cisco
                                          Switching: Juniper, Arista, Cisco
                                          Wireless: Unifi, Aruba IAP
                                          JNCIP,CCNP Enterprise

                                          GertjanG 1 Reply Last reply Reply Quote 0
                                          • GertjanG
                                            Gertjan @michmoor
                                            last edited by

                                            @michmoor
                                            I’m wrong, it’s more like 15 € here in Europe, not 5 a month.
                                            But still a mere 3 € a month per person.

                                            I’ve used YouTube yesterday without the premium option …… imho : impossible to watch.

                                            No "help me" PM's please. Use the forum, the community will thank you.
                                            Edit : and where are the logs ??

                                            M 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.