If you use a local domain name then you would add that to “Domain name” and “Domain search list”. The example OPNsense router’s IP address is 192.168.88.2. This uses the dnsmasq that we configured in the previous step. This next step configures OPNsense to send it’s own IP address as the DNS server for client DHCP leases.
Services > Dnsmasq DNS > Settings Configuring OPNsense DHCP If you use additional static lease mappings then you will want to also enable “ Register DHCP static mappings“. The important configuration is to enable “ Register DHCP leases“. This step replaces Conditional Forwarding since dnsmasq will be the main resolver and will use the local information for client hostnames. Next we will set dnsmasq to resolve the DHCP client hostnames. We will tell dnsmasq to send the MAC address along with the full IP address of the client:Īdd-subnet=32,128 /usr/local/etc//nf I have chosen to use nf as the filename in the /usr/local/etc/ directory. Once you have access you will need to add an advanced settings file. Setting up SSH access is beyond the scope of this guide but there are a number of guides that can help you with this process. This involves access to the hosts command line. The first step in the process is to set up dnsmasq on the OPNsense host to send the extra information for Pi-hole to utilize. You won’t have to set each client to use Pi-hole directly, and your network hostnames can be resolved without needing Conditional Forwarding.
When we are finished the network clients will be served by the OPNSense DHCP service and will see OPNSense as the sole DNS server. We will use the OPNsense DHCP server, dnsmasq service and an optional Unbound server for Pi-hole upstream DNS resolution. We’ll look at how this works with the popular firewall application OPNsense. This feature was added in FTL version 5.3 and lets you set up external services that can send EDNS0 Client Subnet information with queries. One of the lesser known features of Pi-hole is the ability to see MAC and IP addresses from external servers. The ideas and concepts may still work but the actual implementation may/will not. Using OPNsense DHCP with Pi-hole network ad-blocking NOTE: This guide is likely outdated and based on an older OPNsense version.
0 kommentar(er)
