Hi,
I was wondering why there is no automatic firewall rule creation for the interfaces Unbound DNS listens on like there is for DHCPv4/v6.
Any ideas or theories? :)
I've never had to create a rule after enabling Unbound. It's been a while so it might be different now but as far as I'm aware, it is created by default. Or rather, the allow in from LAN would take care of it.
Is it a special type of interface perhaps you have?
The rules for DHCP are for hosts/clients to talk to the firewall, not the other way around.
No exotic interface, just VLAN on a physical gigabit ethernet port. There was no automatic rule creation for port 53 TCP/UDP, see attached screenshot. Queries aren't answered until I manually create an allow rule from interface net to interface address on 53 TCP/UDP. So the firewall is working as expected but the original question remains.