WAN interface DNS to Verizon servers

[JMini]

I'm on Verizon FiOS and have my OPNSense FW connected to the ONT. My WAN interface is configured to get its address via DHCP. So I'm assuming that it's getting DNS servers assigned.
I'm seeing packets leaving the WAN interface to Verizon DNS servers. Only a few. No inbound traffic from a LAN trying to go to a Verizon DNS server. Just out of the WAN interface.
I have AdguardHome set up for all internal DNS needs over DOH.

Is there somewhere that OPNSense might be using Verizon's assigned DNS servers?

[spetrillo]

The only place would be in System/Settings/General. Here you can define what DNS servers to use, but more importantly for you is if Allow DNS server list to be overridden by DHCP/PPP on WAN is checked or unchecked. If checked then your FIOS DNS servers will be used.

[JMini]

In System/Settings/General
I added 1.1.1.1 into the DNS server list (Selected the WAN_DHCP gateway)
And, crucially I think, I UNCHECKED "Allow DNS server list to be overridden by DHCP/PPP on WAN"

I've only been using OPNSense for a little over a week now and am still coming to grips with everything.
Thanks.

[JMini]

I still saw the Verizon DNS in the logs. I did find the cause in AdGuard though.
"By default, AdGuard Home uses the following reverse DNS resolvers: "71.243.0.12:53", "71.250.0.12:53" "
So, this is for private IP stuff, so I just pointed it to DNSMasq on OPNSense which will resolve IPs for internal DHCP clients