DNS Queries on my firewall from the internet

Started by MrLee, Today at 07:12:00 PM

Previous topic - Next topic
I'm using OPNSense as a edge router on my network.
I have to permit most IP Traffic through to allow my devices inside to work.

In my firewall logs I see a lot of DNS Queries hitting my "inside" interface.
is there a way to specifically block this through rules?

my router is not a DNS Server for anything that I need.

Quote from: MrLee on Today at 07:12:00 PMIn my firewall logs I see a lot of DNS Queries hitting my "inside" interface.
is there a way to specifically block this through rules?

my router is not a DNS Server for anything that I need.
But the DNS queries are addressed to the OPNsense IP?
If so you should find out the reason for this. Maybe you're running a DHCP on OPNsense, which hands out the interface IP as DNS server?

Surely you can block DNS apart from this.
Just add a block rule for TCP/UDP with destination "This firewall" and port 53.