Opnsense in double nat - moved to apartment with WhiteSky community internet

[TheLivingBubba]

Hello, I recently moved short term to a place with community internet. I want to use my opnsense box and wireless AP rather than the community wifi. The provider is WhiteSky, I have plugged my opnsense box into the apartment ethernet and I am assigned a 10.198.30.158/22 ip address. When I try and ping from the opnsense box it pings successful, but clients connected have no internet. Tried both by ip and dns, and still no internet.

Running a pihole, unbound is disabled in opnsense, I changed the nat outbound rules to automatic.

Can anyone help?

[TheLivingBubba]

Figured it out with Chatgpt's help. WhiteSky is blocking port 53, did some workaround with cloudfare and unbound.

[nero355]

WhiteSky is blocking port 53, did some workaround with cloudfare and unbound.

This : https://docs.pi-hole.net/guides/dns/unbound/
Does not work with CG-NAT like connections or when the ISP is filtering/blocking DNS Traffic indeed :)