DNS Query Forwarding - Enable Forwarding Mode

[sidewinder]

May seem like a dumb question but if I enable dns query forwarding mode under the resolver settings will pfblockerng still parse the block lists, block ads, etc?

The DNS lookups were painfully slow on the network if forwarding is not turned on.

Once "Enable Forwarding Mode" is checked, the DNS lookups fly but I wonder if PFblockerNG is being utilized at all?

Thanks

[BBcan177]

You can use Unbound in Resolver mode or in Forwarder mode…. Still recommended to use Resolver mode so that you use the Root dns servers... but that's up to you to decide....  Also keep in mind that not all Forwarders support DNSSEC.

[sidewinder]

@BBcan177:

You can use Unbound in Resolver mode or in Forwarder mode…. Still recommended to use Resolver mode so that you use the Root dns servers... but that's up to you to decide....  Also keep in mind that not all Forwarders support DNSSEC.

Thanks for this info. The resolver mode was often noticeably slow on some lookups - maybe there is some other config option I have screwed up?