You’ll likely need a firewall rule to redirect any hard coded dns to said pihole to ensure no bypassing.Įdit: oops. There’s a blog post on this topic that could be considered from Pi Hole. and 2) using unbound is avoiding pihole to use cloudflare/google/etc.as its upstream dns, and it's checking directly with the authoritative nameservers to get the IP In this way 1) I can use pihole, no matter the vlans clients are. The dns upstream of my Firewall is the IP of my pihole, and the upstream of my pihole is unbound, installed on the same rapsberry. So, what I did was: I kept using my OPNSense as DNS for all clients. Not sure if it's the best option, since I'm not an expert.but it makes the trick:Īssigning the IP of my pihole to all clients connected to my network, would mean that all clients should have access to the raspberry, even the ones I wanted to keep isolated. In case somebody has the same questions I had, this is what I did. Trying to find on internet some tutorial about how to configure OPNsense with pihole Ive found this:īut they never finished the instructions to have configured Unbound on OPN along with pihole.

Reddit opnsense