Thursday, July 7, 2022

pfSense Multi VLAN DNS (host) overrides

pfSense’s DNS resolver has the ability to do host overrides from the gui, but these are global overrides.
Unbound (the underlaying DNS resolver) has the ability to create DNS views to do different things based on source addresses.
It is located under Services - DNS Resolver - General - Custom options. It is a free format field.

Example:

server:
access-control-view: 10.123.12.0/24 vlan15activedirectory
access-control-view: 10.158.1.0/24 vlan16guest

view:
name: "vlan15activedirectory"
local-zone: "vpn.client.net" static
# adding the host as a zone results in NXDomain lookup

view:
name: "vlan16guest"
local-data: "vpn.client.net. 90 IN A 11.12.13.10"
# adding a specific host and map it to a specific ip

More info: https://unbound.docs … ring/tags-views.html