DNS Forwarder & DNS Resolver



  • Dear All

    Can you please clarify the Difference between DNS Forwarder & DNS Resolver in forwarding mode

    thanks



  • @HSol:

    Dear All

    Can you please clarify the Difference between DNS Forwarder & DNS Resolver in forwarding mode

    thanks

    There is no functioning difference. Both forward the request to the upstream DNS server(s) setup.



  • The Forwarder uses DNSMASQ whereas the Resolver uses Unbound.

    IIRC dnsmasq sends dns requests upstream to a server (your ISP or one you specify like Quad9) and caches the results.  Unbound queries the root dns servers directly by default, it’s also what you need if you are using dns blocking in the pfBlockerNG package.



  • @motific:

    The Forwarder uses DNSMASQ whereas the Resolver uses Unbound.

    IIRC dnsmasq sends dns requests upstream to a server (your ISP or one you specify like Quad9) and caches the results.  Unbound queries the root dns servers directly by default, it’s also what you need if you are using dns blocking in the pfBlockerNG package.

    But only if your not using it in forwarding mode. pfBlockerng works but in forwarding mode you’re not using roots.


  • Rebel Alliance Global Moderator

    Where did you get the idea that pfblockerng needs to use forwarder mode?

    https://forum.pfsense.org/index.php?topic=128721.msg709743#msg709743

    Straight from bbcan177
    You can use either the DNS Resolver Forwarding mode or the DNS Resolver mode.