Differences

This shows you the differences between two versions of the page.

--- pfsense:stopping_dns_leaks [2020/04/14 14:37] – created peter
+++ pfsense:stopping_dns_leaks [2020/11/30 12:07] (current) – removed peter
@@ Line 1: / Line 1: @@
-====== PFSense - Stopping DNS Leaks ======
-Navigate to **Services -> DNS Resolver**
-  * DNS Query Forwarding:  **Not Checked**.
-  * Custom Options:  <code>
-server:
-  ssl-upstream: yes
-  do-tcp: yes
-  forward-zone:
-    name: "."
-    forward-addr: 1.1.1.1@853
-    forward-addr: 1.0.0.1@853
-    forward-addr: 2606:4700:4700::1111@853
-    forward-addr: 2606:4700:4700::1001@853
-</code>
-It’s OK to set the resolver to listen on all interfaces, since the firewall rules on the WAN will prevent Internet hosts from using your resolver anyway.
-Follow the prompts, then test it with something like;
-<code bash>
-dig www.google.com @yourrouter.local
-</code>
-You should see a resolve against your router’s local DNS resolver that works.
-If you really want, use **Diagnostics -> Packet Capture**, and capture port 853 to verify that requests are being triggered.