These 2 files are "modified" every hour?
/etc/hosts and /etc/resolv.conf
Since nothing is changing from the WAN, is there a setting to prevent file modification if nothing changes?
From the System: Log Files: General log: [dhcp6c]
Noticedhclientdhclient-script: Creating resolv.conf
Noticedhclientdhclient-script: New Hostname (igc0): OPNsense
Noticedhclientdhclient-script: Reason RENEW on igc0 executing
If your ISP forces a renew of the lease every hour, the configuration will be updated every hour, wether it actually changed or not.
Possibly disabling System > Settings > General > Allow DNS server list to be overridden by DHCP/PPP on WAN helps.
OK, thanks for your reply. But I use unbound with DoT with the NAT rule to force LAN DNS to unbound. I will try testing this, but want to prevent unencrypted DNS traffic.
Just tested and no change. BTW, the motivation for this is to reduce disk writes.