Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Alternative DNS Servers - no filter/censorship (buydomains.com problem)

    Scheduled Pinned Locked Moved General pfSense Questions
    72 Posts 11 Posters 15.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      MrGlasspoole
      last edited by

      Selecting just LAN on "Network Interfaces" and "Outgoing Network Interfaces" gives the error:
      This system is configured to use the DNS Resolver as its DNS server, so Localhost or All must be selected in Network Interfaces.

      1 Reply Last reply Reply Quote 0
      • K
        kejianshi
        last edited by

        Select all.  Port 53 is closed on the WAN.  No issues there.

        1 Reply Last reply Reply Quote 0
        • M
          MrGlasspoole
          last edited by

          Now only the gateway question is still open :)

          1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator
            last edited by

            Then select both lan and localhost ;)  ALL is BAD practice!!

            Here is mine

            setupdnsresolver.png
            setupdnsresolver.png_thumb

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            1 Reply Last reply Reply Quote 0
            • K
              kejianshi
              last edited by

              I wouldn't screw with the gateway…  unless you are in the mood to upgrade to a ISP/Modem combo that gets you a public IP on the pfsense wan?

              1 Reply Last reply Reply Quote 0
              • K
                kejianshi
                last edited by

                Not sure if you know, but you select individual interfaces by holding the cntl key while clicking on the ones you want.

                What johnpoz is saying is best - I was trying to keep it simple…

                1 Reply Last reply Reply Quote 0
                • M
                  MrGlasspoole
                  last edited by

                  @kejianshi:

                  Not sure if you know, but you select individual interfaces by holding the cntl key while clicking on the ones you want.

                  I know that :-) - My computer knowledge is good but pfSense is overwhelming :-)

                  So the important part here is that on "Network Interfaces" you just have the internal and
                  on "Outgoing Network Interfaces" the external stuff?

                  Gateway:
                  I did check my ISP router and i have the bridge option now.
                  I made the hack a year ago and the option was not there - seems like after
                  some firmware update it changed.
                  I have a warning "from manufacture not supported change".

                  So i can select LAN2 as bridged.
                  But if i do that and connect my pfSense WAN NIC to LAN2 i can not reach the router anymore with 10.0.0.1.

                  What changes do i need to make in pfSense to test it?
                  I guess in "Interfaces > WAN" and "System > Routing > Gateways"

                  1 Reply Last reply Reply Quote 0
                  • DerelictD
                    Derelict LAYER 8 Netgate
                    last edited by

                    Is your WAN DHCP or PPPoE?

                    (Or Static?)

                    Chattanooga, Tennessee, USA
                    A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                    DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                    Do Not Chat For Help! NO_WAN_EGRESS(TM)

                    1 Reply Last reply Reply Quote 0
                    • DerelictD
                      Derelict LAYER 8 Netgate
                      last edited by

                      Wait.  If you select bridged your router is no longer a router so you might not be able to get to it any more at all and, frankly, who cares?

                      Chattanooga, Tennessee, USA
                      A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                      DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                      Do Not Chat For Help! NO_WAN_EGRESS(TM)

                      1 Reply Last reply Reply Quote 0
                      • M
                        MrGlasspoole
                        last edited by

                        @Derelict:

                        Is your WAN DHCP or PPPoE?
                        (Or Static?)

                        Static - pictures of WAN and gateway settings are ad top of this page  :)

                        @Derelict:

                        Wait.  If you select bridged your router is no longer a router so you might not be able to get to it any more at all and, frankly, who cares?

                        I care cause the phone book, caller list, fax stuff and everything is handled by that box.
                        There are two phones connected to that box. You can't use dedicated VoIP phones with german
                        cable ISPs (VoC) cause they don't work. They don't give you the access data and it only works from
                        your box in your house (not like normal VoIP).

                        1 Reply Last reply Reply Quote 0
                        • K
                          kejianshi
                          last edited by

                          Yes - I call it built in BS and multifunction trash designed to purposely remove your options.  Very familiar with the concept.

                          1 Reply Last reply Reply Quote 0
                          • H
                            hda
                            last edited by

                            @MrGlasspoole:

                            @Derelict:

                            Is your WAN DHCP or PPPoE?
                            (Or Static?)

                            Static - pictures of WAN and gateway settings are ad top of this page  :)

                            Meh, what is your connection protocol to your ISP ….

                            You should get your public IP on WAN if bridged works or is supported at all, which you must test.
                            Close your firewall WAN inbound vulnerabilities first.

                            1 Reply Last reply Reply Quote 0
                            • M
                              MrGlasspoole
                              last edited by

                              @hda:

                              Meh, what is your connection protocol to your ISP ….

                              What do you mean by protocol?
                              It's DOCSIS, IPv4…

                              1 Reply Last reply Reply Quote 0
                              • DerelictD
                                Derelict LAYER 8 Netgate
                                last edited by

                                Static - pictures of WAN and gateway settings are ad top of this page  :)

                                At the top of what page?

                                Forum users can set how many messages per page are shown.

                                Please provide a link to the exact post or attach it again.  Thanks.

                                Chattanooga, Tennessee, USA
                                A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                1 Reply Last reply Reply Quote 0
                                • M
                                  MrGlasspoole
                                  last edited by

                                  Sorry: https://forum.pfsense.org/index.php?topic=87678.msg483594#msg483594

                                  1 Reply Last reply Reply Quote 0
                                  • DerelictD
                                    Derelict LAYER 8 Netgate
                                    last edited by

                                    Yeah, that's a static on 10.0.0.1.  If you're bridged to the internet you should, somehow, get a public IP on WAN.  This is usually accomplished with DHCP or PPPoE.

                                    Chattanooga, Tennessee, USA
                                    A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                    DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                    Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                    1 Reply Last reply Reply Quote 0
                                    • H
                                      hda
                                      last edited by

                                      @MrGlasspoole:

                                      What do you mean by protocol?
                                      It's DOCSIS, IPv4…

                                      So, then probably your protocol is a DHCP on WAN, anyway you have to test.
                                      Beware if it works or is supported by ISP Unitymedia:

                                      • "front door" is open, control inbound ports on WAN
                                        -  may lose the phone capabilities.
                                      1 Reply Last reply Reply Quote 0
                                      • chpalmerC
                                        chpalmer
                                        last edited by

                                        You don't have any DNS servers set up on your General page but your WAN is setup for static!

                                        I believe the pfSense box will use DHCP to locate needed DNS. (Ive not tested this)

                                        On the General page fill in at least one DNS and click both boxes below.

                                        Triggering snowflakes one by one..
                                        Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

                                        1 Reply Last reply Reply Quote 0
                                        • M
                                          MrGlasspoole
                                          last edited by

                                          I made a test with the settings in the attachments.
                                          I also tried it with setting 8.8.8.8 in the general page.

                                          In the dashboard i see then:
                                          WAN (DHCP): a public ip but different then the one i have in my ISPs router
                                          DNS server(s): the same like in my ISPs router

                                          and i get "unable to obtain update status" - so no internet.

                                          1 Reply Last reply Reply Quote 0
                                          • K
                                            kejianshi
                                            last edited by

                                            I guess you don't like the way I suggested to do it?

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.