Bypassing pfblocker for a specfic static ip?
-
Did a lot of reading here and there seems to be a bit of confusion of debate on how to.
This of course may be due to old posts of old versions.
I want to bypass pfblocker for a single ip.
Thoughts?
-
https://forum.netgate.com/topic/129365/bypassing-dnsbl-for-specific-ips/13
-
If you are using static mappings in the DHCP, I believe that one alternative to modifying unbound's custom options would be to specify DNS servers in the DHCP static mapping(s) of the host(s) that you wish to exclude from DNSBL. Of course, this is only if you're willing to use other DNS servers. For example:
That way, the host(s) won't use the pfSense machine for DNS at all. Note that you would need to take additional steps for this to work if you have also configured a NAT port forward to redirect any DNS requests from hosts on your LAN to unbound.Also, keep in mind DNSBL IPs (if enabled), which are handled via firewall rules instead of unbound:
If you want certain static IPs to also be excluded from this, you can set the list action to Alias Deny, as in my screen shot, and then create your own block rules that do not apply to the static IP(s) in question. Or you could leave the List Action set to one of the "Deny" options that automatically creates rules, but configure advanced rules that exclude your static IP(s):
@BBcan177, if any of this is terrible or misguided advice, please feel free to set me straight
