<![CDATA[DNS Forwarder; entering "host overrides" from outside the GUI]]>I'm entering DNS Forwarder host overrides to propogate to DNSMasq host overrides in the unbound.conf file.  Propogation is alive and well.  Will take a number of hours if the GUI is the only avenue to set a large number of overrides.

Does anyone know a way to drop a few hundred IP/hostnames other than through the Forwarder GUI?

Any help appreciated…

]]>https://forum.netgate.com/topic/63042/dns-forwarder-entering-host-overrides-from-outside-the-guiRSS for NodeSun, 19 Jul 2026 12:27:52 GMTThu, 21 Nov 2013 17:25:25 GMT60<![CDATA[Reply to DNS Forwarder; entering "host overrides" from outside the GUI on Sat, 04 Jan 2014 00:14:41 GMT]]>Albra,
Wasn't that comfortable editing the xml but maybe I need to warm up to it on the test box.  Prefer your option "C" the best if it works.  I saw the paste window you describe and hoped it may be a method of bulk entry but the note below states that additional options are to be entered.  I thought "options' meant custom forwarder settings rather than hostname/ip entries similar to the paste window in the unbound package.  So is the syntax hostname/ip<space>hostname/ip<space>hostname/ip?

I'm doing many IP's because my network has 10 gateways with distributed DHCP on each subnet.  And I want Kiwi syslog server to resolve private IP's without relying on if the client device had a hostname entered into it's GUI.  If/when PfSense adds multiple DHCP pools such that leases can be served by PfSense to all gateway subnets then I can abandon this method.

I use the unbound package so the forwarder is disabled.</space></space>

]]>https://forum.netgate.com/post/437209https://forum.netgate.com/post/437209Sat, 04 Jan 2014 00:14:41 GMT<![CDATA[Reply to DNS Forwarder; entering "host overrides" from outside the GUI on Fri, 03 Jan 2014 00:36:39 GMT]]>if you haven't already done this, I have a couple of questions …

a) Why are you doing so many IP's?
b) Why not the whole domain? (and use the forwarder?)

As to how to do it ... There are several options ... (all work on 2.0.1)

A) Add config file to dnsmasq ...

  • SSH to pfsense
  • remount your filesystem in read-write mode ( /etc/rc.conf_mount_rw )
  • upload your "unbound.conf" to /usr/local/etc/dnsmasq.conf
  • remount your filesystem in read-only mode ( /etc/rc.conf_mount_rw )
  • restart dnsmasq server under " Status | System " in the GUI

B) Edit the config file for pfsense

  • SSH to pfsense
  • remount your filesystem in read-write mode ( /etc/rc.conf_mount_rw )
  • edit the config file (/cf/conf/config.xml) and place the contents of your unbound.conf under "<pfsense><dnsmasq><custom_options>"
  • remount your filesystem in read-only mode ( /etc/rc.conf_mount_rw )
  • restart dnsmasq server under " Status | System " in the GUI

C) Using the GUI

  • go to "Services | DNS Forwarder | Advanced"
  • cut-n-paste the contents of your unbound.conf file into the Advanced box

D) Pure XML:

  • SSH to pfsense
  • remount your filesystem in read-write mode ( /etc/rc.conf_mount_rw )
  • add "<hosts><host>hostname</host><domain>domain.name</domain><ip>ip.add.re.ss</ip></hosts>" for each host under "<pfsense><dnsmasq>"
  • add "<domains><domain>domain</domain><ip>ip.add.re.ss1</ip></domains>" for each domain under "<pfsense><dnsmasq>"
  • remount your filesystem in read-only mode ( /etc/rc.conf_mount_rw )
  • restart dnsmasq server under " Status | System " in the GUI

Personally, I use (C) as it's easy to manipulate in excel/notepad/etc, and just cut-n-paste ...

For "Host Overrides" (using method A,B,C):
address=/hostname.domain.name/ip

For "Domain Overrides" (using method A,B,C):
server=/domain/ip.add.re.ss1
rebind-domain-ok=/domain/
If you don't do the rebind-domain-ok then it will get ignored.

@</dnsmasq></pfsense></dnsmasq></pfsense></custom_options></dnsmasq></pfsense>

]]>https://forum.netgate.com/post/437078https://forum.netgate.com/post/437078Fri, 03 Jan 2014 00:36:39 GMT<![CDATA[Reply to DNS Forwarder; entering "host overrides" from outside the GUI on Fri, 22 Nov 2013 14:22:35 GMT]]>They are in the config.xml file (/cf/conf/conf.xml) under pfsense/dnsmasq/hosts element. Believe it will work fine to edit the config.xml and then do a reboot…

]]>https://forum.netgate.com/post/431018https://forum.netgate.com/post/431018Fri, 22 Nov 2013 14:22:35 GMT