<![CDATA[DNS forwarder question]]>I have questions related to https://doc.pfsense.org/index.php/DNS_Forwarder

I am using default settings except that I checked the box next to "Register DHCP static mappings in the DNS Resolver".

In the docs, I found this note:

Important Note: This service should not be exposed publicly. Ensure inbound rules on WANs do not allow connections from the Internet to reach the DNS Forwarder service on the firewall.

Does this mean I need to add a rule to my firewall to protect against this service being exposed?  I am using the default firewall rules that come with a default pfSense installation.

]]>https://forum.netgate.com/topic/81238/dns-forwarder-questionRSS for NodeFri, 14 Aug 2026 18:50:52 GMTMon, 16 Mar 2015 01:30:50 GMT60<![CDATA[Reply to DNS forwarder question on Mon, 16 Mar 2015 01:34:26 GMT]]>No - All it means is that you should not add an allow rule on your WAN, thereby exposing port 53 to external traffic.

If you want to check your service ports to see if port 53 is open or closed you can use:

https://www.grc.com/x/ne.dll?bh0bkyd2

]]>https://forum.netgate.com/post/527829https://forum.netgate.com/post/527829Mon, 16 Mar 2015 01:34:26 GMT