<![CDATA[Use different DNS providers for both DNS forwarder and DNS Resolver]]>Both DNS forwarder and DNS resolver are setup on my pfSense box.
I would like one of the two services to use OpenDNS (with their dns filter) and the other one use CloudFlare DNS.

DNS forwarder uses the DNS settings in System -> General.
DNS Resolver will use them as well if I set it to forward mode.

Is there a way I can set DNS forwarder to use OpenDNS and DNS Resolver to CloudFlare DNS?

]]>https://forum.netgate.com/topic/130128/use-different-dns-providers-for-both-dns-forwarder-and-dns-resolverRSS for NodeWed, 13 May 2026 01:06:55 GMTWed, 25 Apr 2018 07:40:00 GMT60<![CDATA[Reply to Use different DNS providers for both DNS forwarder and DNS Resolver on Wed, 25 Apr 2018 16:37:35 GMT]]>

But that would not allow me to use host overrides…
Not an option for me.

You didn't mention anything about that requirement.  Glad to see you got something figured out and working.

]]>https://forum.netgate.com/post/762637https://forum.netgate.com/post/762637Wed, 25 Apr 2018 16:37:35 GMT<![CDATA[Reply to Use different DNS providers for both DNS forwarder and DNS Resolver on Wed, 25 Apr 2018 15:25:42 GMT]]>I solved this by running both DNS Forwarder and DNS Resolver.
DNS resolver on a different port (1053) and setup a port forward.
DNS forwarder set to forward to OpenDNS and DNS resolver setup with custom options:


server:
forward-zone:
name: "."
forward-ssl-upstream: yes
forward-addr: 1.1.1.1@853
forward-addr: 1.0.0.1@853

Is does work without TLS/SSL as well:


server:
forward-zone:
name: "."
forward-addr: 1.1.1.1@53
forward-addr: 1.0.0.1@53
]]>https://forum.netgate.com/post/762628https://forum.netgate.com/post/762628Wed, 25 Apr 2018 15:25:42 GMT<![CDATA[Reply to Use different DNS providers for both DNS forwarder and DNS Resolver on Wed, 25 Apr 2018 15:06:06 GMT]]>To be honest I would just use bind for such complex setup.  While unbound did add views a few versions back.  I do not believe you can add different forwarder options, etc.  So vs running both dnsmasq and unbound.

Why not just run bind?  Which in that you can create specific views so that IP X or network Y get forwarded to A, while others get forwarded to B, etc.

]]>https://forum.netgate.com/post/762626https://forum.netgate.com/post/762626Wed, 25 Apr 2018 15:06:06 GMT<![CDATA[Reply to Use different DNS providers for both DNS forwarder and DNS Resolver on Wed, 25 Apr 2018 14:48:42 GMT]]>But that would not allow me to use host overrides…
Not an option for me.

]]>https://forum.netgate.com/post/762621https://forum.netgate.com/post/762621Wed, 25 Apr 2018 14:48:42 GMT<![CDATA[Reply to Use different DNS providers for both DNS forwarder and DNS Resolver on Wed, 25 Apr 2018 14:41:37 GMT]]>I would just modify the DHCP server on the kids VLAN to serve them the OpenDNS servers.

]]>https://forum.netgate.com/post/762619https://forum.netgate.com/post/762619Wed, 25 Apr 2018 14:41:37 GMT<![CDATA[Reply to Use different DNS providers for both DNS forwarder and DNS Resolver on Wed, 25 Apr 2018 14:06:09 GMT]]>Not every network is the same.  ;)

I have a few VLAN's which need to go over OpenDNS (with dns filtering on), the "kids" VLAN.
Also I have an "admin" VLAN which needs dns filtering off, so I can't use OpenDNS there.

]]>https://forum.netgate.com/post/762613https://forum.netgate.com/post/762613Wed, 25 Apr 2018 14:06:09 GMT<![CDATA[Reply to Use different DNS providers for both DNS forwarder and DNS Resolver on Wed, 25 Apr 2018 14:00:13 GMT]]>I can't imagine why you would need to do this in the first place.  What's your use case?

]]>https://forum.netgate.com/post/762610https://forum.netgate.com/post/762610Wed, 25 Apr 2018 14:00:13 GMT