Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Need Help with DNS Bypass for a Specific Computer

    Scheduled Pinned Locked Moved NAT
    4 Posts 3 Posters 444 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      Magwich
      last edited by

      Do that NAT Port Forwarding rules work from the top down?

      I have these 2 NAT port forwarding rules. The bottom rule redirects all DNS requests on my home network and forces them to use the DNS server that Pfsense uses. I am attempting to bypass the bottom rule for a single computer with the rule on top, but I'm not having any luck. Any ideas? Sorry for the odd line wrapping.

      Interface    Protocol	Source 	Source   Dest. Address      Dest.
      		        Address Ports	                    Ports
      ------------------------------------------------------------------------
      WAN__PORT_1   TCP/UDP	  *	  *	WAN__PORT_1 address 53 (DNS)
      LAN_BRIDGE_0  TCP/UDP	  *       *	        *           53 (DNS)
      
      
      NAT IP		NAT
      	        Ports
      -----------------------
      192.168.1.2	53 (DNS)
      127.0.0.1	53 (DNS)
      

      Thank you!

      1 Reply Last reply Reply Quote 0
      • A
        akuma1x
        last edited by

        If you’re using DHCP on pfsense, you can specify a static IP lease for this particular computer. After you do that, on the settings page for that particular computer, you can set whatever DNS servers you want it to use.

        You don’t have to use firewall rules to do this.

        Jeff

        1 Reply Last reply Reply Quote 1
        • M
          Magwich
          last edited by

          I am using a DCHP assigned static lease on that computer; so, it has a static IP. I do have that computer assigned to 1.1.1.1 at the computer level which is different to what I have the router enforcing on the bottom rule. However, I don't think my top rule is correct. In the top rule I am attempting to bypass the bottom rule. I thought that these rules stopped going from the top down once the conditions on one of the rules were met. Any ideas? Thank you!

          1 Reply Last reply Reply Quote 0
          • GertjanG
            Gertjan
            last edited by

            Order priority of NAT rules ?
            I advise you to use firewall rules to achieve known ordering.
            See https://docs.netgate.com/pfsense/en/latest/dns/redirecting-all-dns-requests-to-pfsense.html and https://docs.netgate.com/pfsense/en/latest/dns/blocking-dns-queries-to-external-resolvers.html

            No "help me" PM's please. Use the forum, the community will thank you.
            Edit : and where are the logs ??

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.