Christos
Regular Contributor
DNS resolver seems faster and more reliable. I've been using unbound in this mode for the past 3-4 months and don't plan to change it.I switched today from DNS forwarding to DNS resolver.
DNS resolver seems faster and more reliable. I've been using unbound in this mode for the past 3-4 months and don't plan to change it.I switched today from DNS forwarding to DNS resolver.
It depends if pfblockerng’s rules block outbound traffic originating from the router, or just the LAN. Skynet does both.If I am running unbound on Pfsense I guess the same thing will happen? Even if I am running Pfblocker?
So, I was reading today about Skynet and unbound hitting China's Authoritative servers even though China is blocked. It got me thinking. If I am running unbound on Pfsense I guess the same thing will happen? Even if I am running Pfblocker? It might be better to run Forwarding so China will be blocked and their servers will not be hit. I am I thinking about this right?
I just switched back to Forwarding and I don't really notice a lot of difference using Pfsense 24.03 and QUAD9.
Interesting. Yes, if you block them on the WAN side then China will receive the packet and it will be blocked on the return from China. So, yes you really need to block on the LAN side so they do not receive a packet.It depends if pfblockerng’s rules block outbound traffic originating from the router, or just the LAN. Skynet does both.
So, I had this discussion on Pfsense forums recently about this. You can read the whole discussion if you want. I just picked a country at random. I am playing with the idea of Pfblocker but I have to fully understand how it works.It depends if pfblockerng’s rules block outbound traffic originating from the router, or just the LAN. Skynet does both.
the return packets will be allowed because it is a stateful firewall and if a packet is allowed to leave, the reply is also allowed to pass.If you block China on the WAN side, then all data will be sent because WAN is not checked on outbound and the return packets will be blocked.
Thread starter | Title | Forum | Replies | Date |
---|---|---|---|---|
C | Using 2 routers (no bridge), DDNS configuration not working | Routers | 3 | |
B | Long shot but worth a shot? WFH using CISCO phone audio delay 5-10 seconds | Routers | 1 | |
C | Pfsense wins awards | Routers | 34 | |
pfSense No More Without Paid Version? | Routers | 116 | ||
C | Pfsense with newer CPUs | Routers | 22 | |
C | Att Fiber bypass for pfsense | Routers | 1 |
Welcome To SNBForums
SNBForums is a community for anyone who wants to learn about or discuss the latest in wireless routers, network storage and the ins and outs of building and maintaining a small network.
If you'd like to post a question, simply register and have at it!
While you're at it, please check out SmallNetBuilder for product reviews and our famous Router Charts, Ranker and plenty more!