DNS forwarder question

[Waggles]

I have questions related to https://doc.pfsense.org/index.php/DNS_Forwarder

I am using default settings except that I checked the box next to "Register DHCP static mappings in the DNS Resolver".

In the docs, I found this note:

Important Note: This service should not be exposed publicly. Ensure inbound rules on WANs do not allow connections from the Internet to reach the DNS Forwarder service on the firewall.

Does this mean I need to add a rule to my firewall to protect against this service being exposed?  I am using the default firewall rules that come with a default pfSense installation.

[kejianshi]

No - All it means is that you should not add an allow rule on your WAN, thereby exposing port 53 to external traffic.

If you want to check your service ports to see if port 53 is open or closed you can use:

https://www.grc.com/x/ne.dll?bh0bkyd2