Home
Help
Search
Login
Register
OPNsense Forum
»
English Forums
»
General Discussion
»
Unbound Domain Override for just one Interface
« previous
next »
Print
Pages: [
1
]
Author
Topic: Unbound Domain Override for just one Interface (Read 1294 times)
Com_DAC
Newbie
Posts: 14
Karma: 1
Unbound Domain Override for just one Interface
«
on:
February 06, 2023, 03:48:26 pm »
Does anyone know if there is a way to setup a domain override in Unbound for just a single interface? What I'm trying to do is setup a vpn tunnel for a single VLAN and have only clients on that vlan have dns entries forwarded to the dns on the other side where clients on all other vlan's will have their dns requests go to the standard public resolvers.
I'm just hoping there is a way without having to setup another dns server.
Thank you,
Logged
zan
Full Member
Posts: 175
Karma: 31
Re: Unbound Domain Override for just one Interface
«
Reply #1 on:
February 06, 2023, 05:43:19 pm »
Can you just create a firewall rule on that interface to route traffic destined to DNS ports through the tunnel?
Logged
Patrick M. Hausen
Hero Member
Posts: 6702
Karma: 564
Re: Unbound Domain Override for just one Interface
«
Reply #2 on:
February 06, 2023, 06:03:54 pm »
Install and activate BIND. Have it listen to e.g. 127.0.0.1:53053 or some such.
Create a master zone for each individual override with just an NS and an A record. Yes, you can have the full FQDN as the domain name and you can have an A record for "@".
Configure BIND to forward all other requests to Unbound, possibly 127.0.0.1:53.
Create a NAT port forward rule for that interface directing TCP and UDP 53 to 127.0.0.1:53053.
Done.
Logged
Deciso DEC750
People who think they know everything are a great annoyance to those of us who do.
(Isaac Asimov)
Com_DAC
Newbie
Posts: 14
Karma: 1
Re: Unbound Domain Override for just one Interface
«
Reply #3 on:
February 06, 2023, 08:32:36 pm »
Thank you all for the suggestions. I've come up with one more and that is to just use dnsmasq for the vlan that has access to the tunnel and then use unbound for all other vlan's.
Thank you,
Logged
Print
Pages: [
1
]
« previous
next »
OPNsense Forum
»
English Forums
»
General Discussion
»
Unbound Domain Override for just one Interface