Need Help with DNS Bypass for a Specific Computer
-
Do that NAT Port Forwarding rules work from the top down?
I have these 2 NAT port forwarding rules. The bottom rule redirects all DNS requests on my home network and forces them to use the DNS server that Pfsense uses. I am attempting to bypass the bottom rule for a single computer with the rule on top, but I'm not having any luck. Any ideas? Sorry for the odd line wrapping.
Interface Protocol Source Source Dest. Address Dest. Address Ports Ports ------------------------------------------------------------------------ WAN__PORT_1 TCP/UDP * * WAN__PORT_1 address 53 (DNS) LAN_BRIDGE_0 TCP/UDP * * * 53 (DNS) NAT IP NAT Ports ----------------------- 192.168.1.2 53 (DNS) 127.0.0.1 53 (DNS)Thank you!
-
If you’re using DHCP on pfsense, you can specify a static IP lease for this particular computer. After you do that, on the settings page for that particular computer, you can set whatever DNS servers you want it to use.
You don’t have to use firewall rules to do this.
Jeff
-
I am using a DCHP assigned static lease on that computer; so, it has a static IP. I do have that computer assigned to 1.1.1.1 at the computer level which is different to what I have the router enforcing on the bottom rule. However, I don't think my top rule is correct. In the top rule I am attempting to bypass the bottom rule. I thought that these rules stopped going from the top down once the conditions on one of the rules were met. Any ideas? Thank you!
-
Order priority of NAT rules ?
I advise you to use firewall rules to achieve known ordering.
See https://docs.netgate.com/pfsense/en/latest/dns/redirecting-all-dns-requests-to-pfsense.html and https://docs.netgate.com/pfsense/en/latest/dns/blocking-dns-queries-to-external-resolvers.html