Advices to configure Unbound and Bind plugin for ad-block

Started by mayo, November 08, 2018, 01:34:41 PM

Previous topic - Next topic

Throughout this thread, I kept reading "set Outbound interface to localhost in the unbound settings" and I want to make sure I'm understanding everyone.  I've attached what my Unbound DNS -> General page looks like.  Are you talking about the 2nd to last setting "Outgoing Network Interfaces" (which is set to "All (recommended)") being set to "LAN" instead?

Thanks.

I followed the instructions at https://www.routerperformance.net/opnsense/dnsbl-via-bind-plugin, and am successfully blocking ads for my LAN. However, local DNS DHCP registration no longer works for the local network. For example:

~> nslookup brother.localdomain
Server:      192.168.1.1
Address:   192.168.1.1#53

** server can't find brother.localdomain: NXDOMAIN

If I disable the port forward to BIND (Firewall -> NAT -> Port Forward), then local DNS works fine:

~> nslookup brother.localdomain
Server:      192.168.1.1
Address:   192.168.1.1#53

Name:   brother.localdomain
Address: 192.168.1.7

How can I configure OPNSense to use both BIND DNSBL and local DNS DHCP registration?