Unbound DNS - Resolution on Firewall Itself

[spetrillo]

Hello all,

I have two OPNsense firewalls that are connected via a S2S VPN. I know DNS is flowing across this VPN, since my clients on either side can resolve devices on the other side. It took me a bit to get this going, and it didnt help that Ph-Hole was giving me fits...but thats water under the bridge now.

If you go to Interfaces/Diagnostics/DNS Lookup you can perform lookups from the perspective of the firewall I believe. If I try a FQDN on the far side, with no server selected, it fails. If I add the DNS server on the far side then it resolves. Do I need to add the far side DNS server to the DNS server list in System/Settings/General and is there an order to listing them here? I have my public DNS servers I want to communicate there.

Thanks,
Steve