Ramblings on switching to dnsmasq from isc

[passeri]

Though this is the case with all of what Opnsense offers, just look at the complexity of firewalling and NAT. Some meticulously craft their rulesets, others will go for any any any

which is an important reminder thanks.

I can understand the interest when new features like the Unbound/DNSmasq integration are released. My own network is simple in some ways, being home user(s) only, yet with different services (some public) separated vertically and horizontally with a strong emphasis on security with minimised damage from possible failure. Consequently I need to know clearly where new features fit, what are the alternatives, so I can maintain a clean and useable system. I shall keep happily batting along with Kea while looking for improvements as we always do.