pfBlockerNG and DNS

[ThomasDr]

hello,

I have pfBlockerNG installed and only once the configuration has taken over by wizard. So far I have used the DNS forwarder but have read that I need a DNS resolver for DNSBL. How must the DNS configuration look, I can use both forwarder and resolver or only resolver. I get from my provider a dynamic IP with DNS data and still have the 8.8.8.8 as an alternative DNS resolver. What's the best way?

regards
ThomasD

[Gertjan]

@ThomasDr said in pfBlockerNG and DNS:

So far I have used the DNS forwarder but have read that I need a DNS resolver for DNSBL.

@ThomasDr said in pfBlockerNG and DNS:

How must the DNS configuration look,

The default settings are perfect.

@ThomasDr said in pfBlockerNG and DNS:

I can use both forwarder and resolver or only resolver.

Not possible.
It the Resolver ... or the Forwarder.

@ThomasDr said in pfBlockerNG and DNS:

I get from my provider a dynamic IP with DNS data and still have the 8.8.8.8 as an alternative DNS resolver.

We (nearly) all do.
The Resolver doesn't use (and need) them.

[ThomasDr]

Hello,

ok, I disable the DNS forwarder and activate the DNS Resolver.
For use the Unbound DNS Resolver I add a NAT redirect rule from here:
Netgate Docs redirecting-all-dns-requests-to-pfsense

My question, the NAT redirect rule create a LAN rule too, this rule is automatic below the pfblockerNG IP rules, must I move it above, after the Anti-Lockout Rule?

Do I need the Blocking DNS Queries to External Resolvers rule too?

regards
ThomasD