AdGuard Home + Unbound on Raspberry Pi

[hushcoden]

I'm playing with my raspi and I have installed/configured AdGuard Home + Unbound to use it as a DNS server and want to test it with my OPNsense.

My LAN is on 192.168.0.1/24 while the raspi is connected to another port of my OPN box and labelled LAN3 and is on 192.168.20.1/24

The raspi static IP address is 192.168.20.50

Before turn OPNsense Unbound off, I need to point my LAN devices to the raspi IP address as their new DNS server, and was wondering if it would more logic / better to do that in System -> Settings -> General -> DNS servers or in Services -> DHCPv4 -> LAN -> DNS servers

What are the pros/cons of the two optoins?

tia.

[hushcoden]

Never mind, I'm testing the setup it seems working fine, but I have now a problem, that is I cannot update OPNsense: when I click on check updates OPNsense seems not able to find the servers and I suppose due to DNS issue?

Even disabling AdGuard protection nothing changes, how would I troubleshoot this, please?

Tia

[hushcoden]

Silly me, disabling Unbound, OPNsense had no DNS resolver    hence I did insert the raspi IP address onto System -> Settings -> General -> DNS servers and now OPNsense is up-to-date 

I'm still confused about the proper rules to have on both LAN and LAN3, if someone would be so kind to shed some light, please.

I did create a port forward rule, is it the right way ?

LAN       TCP/UDP       *       *       !Lan3 net       53 (DNS)       192.168.20.50         53 (DNS)          Redirect DNS to Raspi

or should I use

LAN       TCP/UDP       *       *       !This Firewall       53 (DNS)       192.168.20.50       53 (DNS)       Redirect DNS to Raspi


Tia.

[jlab]

Why not just install Adguard on the OPNSense box all together ?

[hushcoden]

Well, I really want to make use of my Raspberry Pi 

I have attached a screenshot of the rules of I have in LAN, LAN3 and port forward, in case anybody has some spare time to help me out.

Tia.