dns servers tls not sure correct

[gbn1987]

hello

i have cloudflare dns servers setup in my pfsense over tls. i have on my linux 1.1.1.1 port 853 tcp and in the firewalling pfsense allow 853 to 1.1.1.1

is this correct?

[gbn1987]

@gbn1987

to forward mode din´t work i see on the internet that i must have 127.0.0.1 but that wont work. there is no other way i think for dns than this setting the other settings wont work

[johnpoz]

@gbn1987 not sure what your trying to do, clients don't normally use dot, ie 853 - clients normally use doh so not sure what your trying to do..

if you want clients to ask pfsense for dns over normal 53, and then have it forward to clouldflare over tls (dot 853).. That would be setup like this.

https://docs.netgate.com/pfsense/en/latest/recipes/dns-over-tls.html