[image: 1737050808671-685ef897-9dfa-4656-81a3-8cb04f4c40f8-image-resized.png] I am aware of the resolver interval, is there a way to bypass one url example imap.gmail.com always forward to 8.8.8.8 do not save in firewall dns namesever for reuse thus every time it gets the new ip address google has for the mail server, they change so fast the firewall can't keep up so the mail app at times says error after 5 mins it will resolve but that is unacceptable for modern use.

@alek said in pfBlockerNG blocking SMTP: No ? That's the easy / easier way. Have a look at this list : Youtube Netgate everything you always wanted to know, and more. There is a Muti WAN video. There is a video about VIP, Carps, etc. The videos are old, but still very valid and very informative. It's a guy from Netgate talking about Netgate/pfSense.

Not fixed as of 2.4.4-RELEASE-p3 (amd64) built on Wed May 15 18:53:44 EDT 2019 FreeBSD 11.2-RELEASE-p10. Only after appending the text dump of my ca cert to /usr/local/share/certs/ca-root-nss.crt was I able to send test messages. "Validate the SSL/TLS certificate presented by the server" had no effect. Package captures verified that pfsense was rejecting the certificate being returned by my email server.