DNS have to create port forward to work

[amrogers3]

I am having trouble getting DNS DoT to work. I am having to create a port forwarding rule for it to work, is this normal?

I have to create NAT port forward for 53 --> 853. I am not blocking anything to 53 in the firewall.

[Gertjan]

@amrogers3 said in DNS have to create port forward to work:

I have to create NAT port forward for 53 --> 853

If DNS clients actually send TLS DNS traffic to port 53 instead of 853, then yes, port forwarding would be needed.
Although these clients can be considered as broken.

@amrogers3 said in DNS have to create port forward to work:

getting DNS DoT to work

On the WAN - upstream side ?
Locally ?
Describe your setup / needs.

Back then, things were presented as https://www.netgate.com/blog/dns-over-tls-with-pfsense.html - and totally simplified afterwards : https://www.netgate.com/blog/pfsense-2-4-4-release-now-available.html