Resolver Domain Override and Policy Routing DNS Requests
-
Hi Everyone,
I need to route DNS requests about a specific domain to a specific WAN.
Now, usually I would create a domain override on the resolver and a FW rule for UDP 53 to the IP of the DNS server in question with the desired WAN interface set in advanced config.
The issue is that the resolver runs on the FW itself and my FW rule on the LAN interface does not match the packets to the DNS server.
How can I configure pfsense to route packets from itself to a specific interface if they are destined to a specific IP address?
Br,
Kris -
If you create a static route you can pick which gateway to use - pfsense own traffic should use that route, for its own traffic.
-
Hmm. Can I use static routes to route traffic to a subnet behind one of my WAN interfaces from one of my subnets too, or they only apply to traffic originating on the FW?
-
If pfsense is set to use default routing - ie you didn't set a gateway via policy routing on rule, and there is a route for a specific destination network to use a specific gateway, then yes it would use that.. More explicit routes are always used over a default route.
