Alternative DNS Servers - no filter/censorship (buydomains.com problem)

MrGlasspoole

@hda:

Meh, what is your connection protocol to your ISP ….

What do you mean by protocol?
It's DOCSIS, IPv4…

Derelict

Static - pictures of WAN and gateway settings are ad top of this page :)

At the top of what page?

Forum users can set how many messages per page are shown.

Please provide a link to the exact post or attach it again. Thanks.

MrGlasspoole

Sorry: https://forum.pfsense.org/index.php?topic=87678.msg483594#msg483594

Derelict

Yeah, that's a static on 10.0.0.1. If you're bridged to the internet you should, somehow, get a public IP on WAN. This is usually accomplished with DHCP or PPPoE.

hda

@MrGlasspoole:

What do you mean by protocol?
It's DOCSIS, IPv4…

So, then probably your protocol is a DHCP on WAN, anyway you have to test.
Beware if it works or is supported by ISP Unitymedia:

"front door" is open, control inbound ports on WAN
- may lose the phone capabilities.

chpalmer

You don't have any DNS servers set up on your General page but your WAN is setup for static!

I believe the pfSense box will use DHCP to locate needed DNS. (Ive not tested this)

On the General page fill in at least one DNS and click both boxes below.

MrGlasspoole

I made a test with the settings in the attachments.
I also tried it with setting 8.8.8.8 in the general page.

In the dashboard i see then:
WAN (DHCP): a public ip but different then the one i have in my ISPs router
DNS server(s): the same like in my ISPs router

and i get "unable to obtain update status" - so no internet.

kejianshi

I guess you don't like the way I suggested to do it?

MrGlasspoole

Just testing and you wrote: pointing to the modem is how grandmother did

The DMZ way (how it is now) works. But if it's better without double NAT and i can get it to work?

But from looking around more on that topic and this box it seems like nobody has it working.
Looks like only business tariff customers can use the bridge cause they get a second IP.

MrGlasspoole

I got a new router from the ISP and had to change stuff because on that stupid thing you can't change the IP to another subnet.
So i did read through this thread again and need to ask again even if you kill me :(

I can't get bridge mode here so i have to set:
Interfaces > WAN
IPv4 Upstream gateway: GW_WAN - 192.168.0.1
Right?

I had kejianshi's suggestion running now the last 2 years:
@kejianshi:

Go to system > General

delete all your server IPs.

uncheck Allow DNS server list to be overridden by DHCP/PPP on WAN

uncheck Do not use the DNS Forwarder as a DNS server for the firewall

save.

Then go to DNS forwarder and make sure its off. Save.

Then go to DNS resolver and make sure its on.
Turn on DNSSEC

Save

BUT still don't understand if for this setting and with no bridge mode his statement is true:
@kejianshi:

Now, you should have raw, un-tampered unmolested DNS from the root servers.

Also still others here wrote you have to put a DNS server in System > General Setup

So with kejianshi's suggestion and without bridge mode I'm using the ISP's DNS server - yes or no?

I also saw on the Timeserves setting:
Remember to set up at least one DNS server if a host name is entered here!