DNS port forwarding does not work

[Roberto]

Hello,

I am trying to forward all DNS requests sent to extarnal hosts to my internal resolver. That should, in principle, be easy. However, I can't get it to work.

I am using OPNsense 26.1.

First of all, I added a destination forward to send (at least, that's the idea) all DNS queries not already directed to the internal DNS resolver to AdGuard (see first screenshot). Then I added a rule to allow the traffic to the DNS resolver (second screenshot) and I made sure it's the first rule for the Home network.

It seems quite straightfoward, but it doesn't work, the DNS queries are not redirected but are answered by the external server, for example 8.8.8.8. AdGuard is listening on the right interfaces and is reachable from the Home network (tested).

I also tried to use 127.0.0.1 as target address and, in another test, "any" instead of "! Home address" as destination address. No change. The rule never gets triggered.

If it helps, I have a couple of other port forwarding rules (on the WAN) and those work fine, so I am really clueless.

Any help will be greatly appreciated.