Use OpenDNS for https filtering with Local DNS adress Resolving
-
Guys I'd like to know if its possible to use OpenDNS on pfSense but still be able to resolve Local Domain Names?
My Network has 5 Active Directory DNS servers but since my network is spreaded over 4 remote Locations and there are a couple of userx who use WORKGROUP machines and mobile phones i can't use Man in the middle for SSL filtering.
I already tested OpenDNS on my pfsense router but my clients fail to resolve internal aresses e.g my mail server when i use OpenDNS DNS adresses. I'd like to know how i can get this to work or if you guys another DNS provider which i could use..
-
Well all your AD machines should point to your AD for dns. Then on your AD either forward to opendns directly, or forward to pfsense that then in turn forwards to opendns.
-
I tried configuring OpenDNS on one of my AD DNS Servers, the servers is the primary DNS for two locations.. On the DNS Server itself filtering seems to work but the machines provided with the DNS adress of that DNS Server still resolve blocked adresses. Even so my mail server adress doesn't resolve internally but it resolves the external wan ip which is hosted via a hosting service.. Did i miss something or do i have to configure OpenDNS adresses on all my ad DNS servers??
-
"Did i miss something or do i have to configure OpenDNS adresses on all my ad DNS servers??"
well yeah if you have multiple dns server you have to set them all to forward….
"DNS adress of that DNS Server still resolve blocked adresses."
Did you flush the cache? Are they pointing to more than just your AD for dns??
-
To answer your question:
Yes i did flush the cache..
I only pointed one (the primary) DNS server to OpenDNS Adresses..
All clients & servers are pointing to two AD DNS Servers…
-
I only pointed one (the primary) DNS server to OpenDNS Adresses..
All clients & servers are pointing to two AD DNS Servers…Dude what is confusing here.. If you have clients that talk to both your AD ns, and you only set one to forward to opendns – if I ask ns 2 what do you think is going to happen???
