DNS Rules Order
-
Hi all,
I have a guest network setup on my pfSense box. After some reading around online, I have created the following rules - and am hoping to get some feedback on whether it is in the correct order/doing what I want it to do.
-
Per the Netgate documentation, I have added a NAT Port Forwarding rule to ensure that all DNS queries go to the local unbound resolver.
-
I have another rule that allows access to the DNS ports on the firewall (53 and 853), followed by another rule that blocks all other access to firewall.
My questions:
1 - Will this work? Or do I need to swap the order of the two DNS rules?
2 - Will this mean that even if someone specifies using 8.8.8.8 for example, it will ignore the 8.8.8.8 part of the request and go straight to the inbuilt resolver? (assuming resolver settings are still their out of the box defaults) -