How to assign different DNS servers to different clients?



  • Hello,

    I need to restrict access to websites by category to some hosts on the network, but not others.

    If I wanted to go the OpenDNS route, this would mean that some hosts would need to be assigned OpenDNS DNS servers, and the workstations designated full access be assigned other DNS servers, but the DHCP GUI on pfSense doesn't seem to allow this.

    I suppose in a larger network you would assign VLANs with separate subnets, but this level of complexity seems hard to justify for a small 15 host network.  Perhaps installing DansGuardian would be another solution, but I'm not sure if this fits either.  Perhaps there also could be a NATing solution, where DNS requests are translated to the correct server depending on the source IP address.

    Thanks,

    Todd



  • The easiest way would be to set up 2 separate DHCP scopes on the same subnet, and assign different DNS servers to each.

    However, you'd need to statically map your clients if you were after more than just loadbalancing.

    Can you expand upon why you need separate DNS servers?



  • Hi,

    My root goal is to have URL filtering on web access, so that VIP-X workstations get unfiltered browsing access, and WRKR-X workstations only get access to business related sites.  If I used a DNS filtering service, such as OpenDNS to do this then they would have to have separate DNS servers.

    How do you configure separate scopes in the pfSense DHCP GUI?

    Thanks,

    Todd



  • @ttblum:

    How do you configure separate scopes in the pfSense DHCP GUI?

    New feature in pfSense 2.1 snapshot builds - see http://forum.pfsense.org/index.php/topic,53716.0.html


Log in to reply