Protecting DNS servers behind pfSense.