Block DNS

[gio79]

Hello to all

I'm pfSense and debugger recently and I need a hand to a rule that I should put on the firewall

I explain my needs:
I want LAN clients are not using their DNS, but use only the DNS set to pfSense

Someone could give me a hand to do this?

Thanks to all

[kpa]

Create a block rule on LAN that blocks any TCP and UDP traffic to port 53 when the destination address is not the LAN address. Put the block rule before any pass rules.

[gio79]

Hello thanks for the reply

I made you a screen shots of my rules … let me know if it is correct in this way?

Hello and thank you

[kpa]

Yes that should work. You can also use just "LAN Address" (from the menu) to restrict the clients to querying just the LAN IP address.

[gio79]

Hello, you can send me a screen shot of how it should be written properly rule on the firewall?

thanks