pfSense LAN with 1.1.1.1 OPT1 with 1.1.1.3

Networking & Firewalls
1

Dear Community,

I have a special request. Using pfSense, is there any way to have all LAN traffic use the DNS of 1.1.1.1 and all of OPT1 (WiFi devices) use the DNS 1.1.1.3??
I would much appreciate if someone can point me to the right direction or gives me the link to a guide on how to accomplish this please.
Many thanks!

@LTS_Tom @LTS_Kyle @LTS_Eric
Thanks for all the great videos and tutorials.

2

I’m curious is there a benefit to using different DNS in your use case ?

You could probably set it so one interface uses the resolver and the other uses the forwarder. There might be other ways too.

3

I don’t know all the technical terms but you should be able to setup rules to watch the dns port and forward all of them to your dns server.

For example a laptop is configured to use 8.8.8.8, you can see this unencrypted request go out on the dns port. Re route it through your dns server. I believe a firewall rule will do it.
https://docs.netgate.com/pfsense/en/latest/dns/redirecting-all-dns-requests-to-pfsense.html

4

You should be able to assign DNS servers for each network in DHCP.