Logging/Viewing original DNS query prior to DNS redirection NAT rule?
-
My NAT rule is setup as the following https://docs.netgate.com/pfsense/en/latest/dns/redirecting-all-dns-requests-to-pfsense.html.
I'd like to be able to know the exact DNS address/query being used before redirection takes place so I know the DNS address that triggered the NAT rule. Is there somewhere in pfSense where I can view this?
-
You will probably need a mirror port on a switch to a traffic analyzer for data like that.