PFSense - DNS - DNS Resolver - Python Mode

PFSense - DNS - DNS Resolver - Python Mode

Disable some setting in Unbound DNS Resolver (if you are using that in pfSense)

Navigate to Services → DNS Resolver.

Disable the following options in Unbound Resolver:

DHCP Registration: Register DHCP leases in the DNS Resolver
OpenVPN Clients: Register connected OpenVPN clients in the DNS Resolver

NOTE: pfBlockerNG has some checks to make sure that the options above are disabled when you enable python mode but it is strongly advised to disable them before starting to configure pfBlockerNG.

Override some clients from the DNS Blocker

Navigate to Firewall → pfBlockerNG → DNSBL → Python Group Policy.

Bypass IPs: Add mulitple lines of IP Addresses to bypass.

192.168.50.100
192.168.50.101
192.168.50.102
192.168.50.103
192.168.50.104
192.168.50.105
192.168.50.106
192.168.50.107
192.168.50.108
192.168.50.109
192.168.50.110
...
192.168.50.199

NOTE: Is the CLEAR network is not using filtering, add all IP addresses from the vlan to bypass.

References

https://www.vikash.nl/setup-pfblockerng-python-mode-with-pfsense/

Table of Contents

PFSense - DNS - DNS Resolver - Python Mode

Disable some setting in Unbound DNS Resolver (if you are using that in pfSense)

Override some clients from the DNS Blocker

References