"DNSBL Listening interface" best choice with VLANs?

[Velcro]

What is the best DNSBL Listening interface for pfBlockerNG?

I have a LAN(recomended default) that does not connect to the internet, VLANs with Opt2 as the parent interface. I have pfBlocker running on the VLANs…

Thanks

[BBcan177]

just keep it as "lan" and use the Permit firewall rule option to create a floating permit rule that will allow the other lan segments to access the DNSBL listening interface