Wireguard force to use own dns server

[Antibiotic]

Hi, this is my settings:

But still have a DNS leakage for Wireguard Interface?
DNS resolver use forwarding mode

[viragomann]

@Antibiotic
Is your first DNS server even responding?

Seems strange to me that it has a RFC 6598 IP.

[MoonKnight]

@Antibiotic

Try to make an NAT DNS redirect rule:

Interface	Protocol	Source Address	Source Ports	Dest. Address	Dest. Ports	NAT IP	   NAT Ports	Description	Actions

WIFI	          TCP/UDP	  WIFI subnets	     *	             *	          53(DNS)     100.64.0.7   53 (DNS)		 

[Antibiotic]

@viragomann Yea, misunderstood settings. This one DNS server have to put in Wireguard VPN gateway, not as main DNS resolver. Everything is working now)))

[Antibiotic]

@viragomann BTW, did you try Crowdsec?
What do you think about this engine, is it only profit if pfSense have open ports on WAN?

[viragomann]

@Antibiotic
No, I just use pfBlockerNG on pfSense with a view lists.