Resolve DNS from external clients

[mCaetano]

I can't resolve DNS for external clients on the local network using fixed public ip.

Error message: ** server can't find google.com: REFUSED

obs:
In fact I would like to do opnsense, too, resolve DNS coming from external IP.

[Deku]

I experienced this message as well when using Dnsmasq.

Error message: ** server can't find xxxxxx REFUSED

In particular, when I would connect with WireGuard, I could not get out to the internet.  A restart of Dnsmasq would not fix it, but changing the config and resaving would fix it.

Since OPNsense has moved to Unbound DNS as the default, I figured I'd try that.  So far, I haven't had the issue with Unbound DNS.  Though as a configuration note for Unbound DNS with WireGuard, you have to add the WireGuard network to the Access List.

As a side note, if Unbound is the preferred DNS, might it make sense to move Dnsmasq out of Core and into Plugins?