Adblocker - Need Help

[Coastal9772]

Hi everyone, I am coming from a closed source router and pihole system. I've been looking at pfsense/pfblockerng and opnsense.

I need to have DNS over TLS and adblocking. I want to be able to ditch the pihole if possible and run everything from the router.
What are your suggestions? Is there a plugin for adguard or some ad blocking service?

[Patrick M. Hausen]

There is a nice AdGuard Home plugin if you install the community repository:
https://www.routerperformance.net/opnsense-repo/

[efahl]

In addition to Patrick's suggestion, you'll probably learn enough going through this thread to do everything you want:  https://forum.opnsense.org/index.php?topic=22162.msg106715#msg106715

[Coastal9772]

Do you know why this isn't an "official" plugin in the repository?

[rman50]

Take a look at the NextDNS service (https://nextdns.io). I connect to it from Unbound using DNS over TLS. Works great for me and doesn't require a separate plugin (though an agent is available as well). If you decide to try it out with Unbound, make sure to disable DNS rebinding checks in OPNsense if you set it to return 0.0.0.0 for blocked sites.

[cookiemonster]

Take a look at the NextDNS service (https://nextdns.io). I connect to it from Unbound using DNS over TLS. Works great for me and doesn't require a separate plugin (though an agent is available as well). If you decide to try it out with Unbound, make sure to disable DNS rebinding checks in OPNsense if you set it to return 0.0.0.0 for blocked sites.

the solution pointed to so far is to use AdguardHome and there is a plugin for it, so yes.
If you mean, is there a "something" like a plugin that puts the configuration of the two or three parts in opn that make the whole as well work well i.e. changing the port for unbound, etc. the no.
But maybe I misunderstand what you mean.

[Coastal9772]

I followed this guide: https://samuelsson.dev/install-adguard-home-on-an-opnsense-router/
How can I ensure that my DNS queries are encrypted using the set up?

[rman50]

the solution pointed to so far is to use AdguardHome and there is a plugin for it, so yes.
If you mean, is there a "something" like a plugin that puts the configuration of the two or three parts in opn that make the whole as well work well i.e. changing the port for unbound, etc. the no.
But maybe I misunderstand what you mean.

I was just providing an alternative option that is completely service based that can be used by OPNsense/Unbound as well as any device when away from the home network.

[chemlud]

Do you know why this isn't an "official" plugin in the repository?

The projects attitude towards the users has changed quite a bit over the last few years, to say the least. Be thankful that someone skillfull takes time to offer some useful resources not considered necessary by the project. I still miss the old dynDNS plugin in the list... ;-)

[Coastal9772]

How do I know if my DNS requests are using DoT when using this implementation? Do I still set DoT on opnsense' end as well or just in AdGuard?