Netgate SG-1000 microFirewall

Author Topic: pfBlockerNG and another DNS server within LAN  (Read 217 times)

0 Members and 1 Guest are viewing this topic.

Offline belgiumrom

  • Newbie
  • *
  • Posts: 17
  • Karma: +0/-0
    • View Profile
pfBlockerNG and another DNS server within LAN
« on: December 29, 2017, 09:46:11 am »
Hi guys,

If the question has been asked before I apologize.
My setup is as follows:
pfsense v2.4.2 x64 with squid, squidguard, dhcp and dnsresolver with forwarding mode disabled.
Another DNS server within LAN, a bind9 running on a ubuntu 16.04 forwarding all the requests to the pfsense DNS.
My LAN devices are getting both DNS addresses (pfsense and ubuntu) when dhcp address is assigned as dns autoconfiguration.
My question:
Is this setup going to work if I want to use pfblockerng or I am defeating the purpose of this package?
In my mind, I believe it should work but I just need another opinion to be sure.

Thanks
« Last Edit: December 29, 2017, 10:45:35 pm by belgiumrom »

Offline BBcan177

  • Moderator
  • Hero Member
  • *****
  • Posts: 2608
  • Karma: +825/-5
    • View Profile
    • Click for Support
Re: pfBlockerNG and another DNS server within LAN
« Reply #1 on: December 29, 2017, 03:54:22 pm »
You can still use an internal DNS server. You just have to make sure that the internal DNS server has its external forwarders set to only pfSense. To utilize DNSBL, you will need to use Unbound and not the DNSMasq forwarder in pfSense.
"Experience is something you don't get until just after you need it."

 | http://pfblockerng.com | Twitter @BBcan177  | #pfBlockerNG |

Offline belgiumrom

  • Newbie
  • *
  • Posts: 17
  • Karma: +0/-0
    • View Profile
Re: pfBlockerNG and another DNS server within LAN
« Reply #2 on: December 29, 2017, 10:44:34 pm »
You can still use an internal DNS server. You just have to make sure that the internal DNS server has its external forwarders set to only pfSense. To utilize DNSBL, you will need to use Unbound and not the DNSMasq forwarder in pfSense.

That's what I thought, thank you!