OPNsense Forum

English Forums => 25.7, 25.10 Series => Topic started by: dns_boy on January 27, 2026, 09:34:54 PM

Title: [SOLVED] Having trouble with DNSMASQ while fine in ISC DHCP4
Post by: dns_boy on January 27, 2026, 09:34:54 PM
First I am a self designated newbie, so I will try to explain my problem.

So I have several devices on an interface (WIFI, only cause I did not want to put the device on my LAN) and mostly they work as I can specify DNS settings. I am using Unbound in Opnsense and DNS over TLS.

Some devices are fine, my phone and tablet (hard coded DNS to my PiHole). I want only 1 Opnsense interface to go to the PiHole, that being my WiFi interface.

The problem is my ROKU device as it does not have the ability to specify a DNS IP. It uses whatever the router (aka Opnsense) does.
I have checked and my Unbound logs show that the DNS for that device is working and showing ANSWER with no errors. However I would like the Unbound DNS data to be sent to the PiHole. It currently is not ?

It worked fine in ISC but now I have setup DNSMASQ and it is not working. One thing I have seen in Zenarmor is that it tries to go to 8.8.8.8 and 8.8.4.4.

Thus I would like to forward all DNS traffic from that one IP/device to the PiHole. I cannot see the query information in the PiHole currently.

I am ok with the Opnsense GUI interface, but I am not knowledgeable on how to force the DNS to work as desired.
Looking for any assistance as I would like to use DNSMASQ as ISC is EOL.

Thanks
dns_boy

2026-01-27 13_49_03-Greenshot.png2026-01-27 13_46_53-Greenshot.png
Title: Re: Having trouble with DNSMASQ while fine in ISC DHCP4
Post by: nero355 on January 27, 2026, 11:59:32 PM
Are you looking for this : https://forum.opnsense.org/index.php?topic=9245.0 ??

Just modify it so it goes to your Pi-Hole :)

You can also run Unbound next to your Pi-Hole by the way : https://docs.pi-hole.net/guides/dns/unbound/
I am using this setup for many years now without any issues!
Title: Re: Having trouble with DNSMASQ while fine in ISC DHCP4
Post by: dns_boy on January 28, 2026, 04:45:09 AM
Thank you .. the first part was exactly what I wanted. I only am doing it on the one interface.