Messages

I been using domain based filtering with host alias and that worked just fine, but recently I see more and more shared endpoints, where unwanted and wanted domains are both point to the same CDN IP address, and hence looking for alternative approaches, I seen few options, but it does not feel like a clear cut, hence turning to the community for advise.

How would you filter domains on OPNSense firewalls in 2023 ?

I'm looking for a tutorial to achieve the following simple TOR routing:

- Clients behind the OPNsense router, can access ".onion" addresses.

That is it, I don't want to:
- Route any other traffic across TOR
- Run an exit point for TOR
- Do other magic

I realize that "simple" is relative, and it will need policy based routeing, DNS rewrite, and etc etc, but if anyone set up OPNsense like this before a short tutorial would be excellent.