how to make pfsense intercept dns queries

[georgelza]

Hi all

I've got dns resolver configured on my pfsense.
is there a way to tell pfsense to catch all dns queries, and first see if it has a record thats applicable, and if not then push it out.

thinking it needs to be listening on outbound port 53 queries .

G

[viragomann]

@georgelza said in how to make pfsense intercept dns queries:

is there a way to tell pfsense to catch all dns queries,

Add localhost to the resolvers listening interfaces and redirect all DNS requests to it with a port forwarding rule on all interfaces.
Looks like this in my pfSense:

Internal is an interface group including my internal interfaces.

and first see if it has a record thats applicable, and if not then push it out.

This is the default behavior of the DNS resolver.

[Uglybrian]

One of my favorite pages on the Netgate Docs-
https://docs.netgate.com/pfsense/en/latest/recipes/index.html
Scroll down to DNS then click on redirecting client Dns.