====== PFSense - DNS - DNS Resolver - Python Mode ======

===== Disable some setting in Unbound DNS Resolver (if you are using that in pfSense) =====

Navigate to **Services -> DNS Resolver**.

Disable the following options in Unbound Resolver:

  * **DHCP Registration**: Register DHCP leases in the DNS Resolver
  * **OpenVPN Clients**: Register connected OpenVPN clients in the DNS Resolver

<WRAP info>
**NOTE:**  pfBlockerNG has some checks to make sure that the options above are disabled when you enable python mode but it is strongly advised to disable them before starting to configure pfBlockerNG.
</WRAP>

----

===== Override some clients from the DNS Blocker =====

Navigate to **Firewall -> pfBlockerNG -> DNSBL -> Python Group Policy**.

  * **Bypass IPs**:  Add mulitple lines of IP Addresses to bypass. <code>
192.168.50.100
192.168.50.101
192.168.50.102
192.168.50.103
192.168.50.104
192.168.50.105
192.168.50.106
192.168.50.107
192.168.50.108
192.168.50.109
192.168.50.110
...
192.168.50.199</code>

<WRAP info>
**NOTE:**  Is the **CLEAR** network is not using filtering, add all IP addresses from the vlan to bypass.
</WRAP>

----

===== References =====

https://www.vikash.nl/setup-pfblockerng-python-mode-with-pfsense/