User Tools

Site Tools


pfsense:dns:dns_resolver:python_mode

PFSense - DNS - DNS Resolver - Python Mode

Disable some setting in Unbound DNS Resolver (if you are using that in pfSense)

Navigate to Services → DNS Resolver.

Disable the following options in Unbound Resolver:

  • DHCP Registration: Register DHCP leases in the DNS Resolver
  • OpenVPN Clients: Register connected OpenVPN clients in the DNS Resolver

NOTE: pfBlockerNG has some checks to make sure that the options above are disabled when you enable python mode but it is strongly advised to disable them before starting to configure pfBlockerNG.


Override some clients from the DNS Blocker

Navigate to Firewall → pfBlockerNG → DNSBL → Python Group Policy.

  • Bypass IPs: Add mulitple lines of IP Addresses to bypass.
    192.168.50.100
    192.168.50.101
    192.168.50.102
    192.168.50.103
    192.168.50.104
    192.168.50.105
    192.168.50.106
    192.168.50.107
    192.168.50.108
    192.168.50.109
    192.168.50.110
    ...
    192.168.50.199

NOTE: Is the CLEAR network is not using filtering, add all IP addresses from the vlan to bypass.


References

pfsense/dns/dns_resolver/python_mode.txt · Last modified: 2023/11/16 22:41 by peter

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki