Pfsense as conditional forwarder

[michmoor]

The background on this is that I was asked to set up a new school environment. That means. CIPA regulation. So yes, there’s a pfsense in the mix here. While I’m eyeing a few dns filtering solutions in the meantime what I have in mind is this
For each VLAN, I will use dns port forward and send to cleanbrowsing dns(or opendns not sure yet)For classrooms and library they will get one policy and then for all others send them to another online filtering service.
The concern I have is how do I service internal domains? So will setting up a domain override work even though I’m using a dns port forward?

[johnpoz]

@michmoor yes you can setup a domain override that says hey looking for somelocaldomain.tld go ask 192.168.100.42, etc..

If something does a query for host.somelocaldomain.tld it would ask 192.168.100.42.. Its only going to forward to where you want to forward say opendns if it does not have a local resource for what they are asking for, or no other domain overrides.

[michmoor]

@johnpoz nice
Appreciate the quick reply