UnboundDNS and Windows AD DNS, best setup?

[Tasagore]

Hi

Newbie question...

I've a domain controller (Windows 2025 Server) and an OPNsense configured with UnboundDNS and Steve Block List as blacklist.

In the DC I've configured the OPNsense as external resolver and all the clients uses the DC DNS (setup by DHCP).

All works fine but when I take a look to the UnboundDNS reports all traffic comes from my DC and I need to know who's trying to access to blocked sites. Also if I want to override then blocklist for some specific workstation probably I couldn't since all the request come from the same computer (DC).

So I guess I should configure the DHCP server to assign then OPNsense as DNS resolver but how I must configure UnboundDNS to use the DC DNS first to resolve the internal requests?

Thanks

[Maurice]

how I must configure UnboundDNS to use the DC DNS first to resolve the internal requests?

Simply configure Query Forwarding for your internal zones.

Cheers
Maurice