Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Inactive Support Threads
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Security
Guides - Privacy & Security Tips
Setup NextDNS with Pfsense
Message
<blockquote data-quote="valvaris" data-source="post: 911285" data-attributes="member: 38787"><p>Hello to all,</p><p></p><p>First things First:</p><p style="text-align: center"><strong><span style="color: rgb(184, 49, 47)"><span style="font-size: 18px">>>><<<>>>DISCLAIMER-START<<<>>><<<</span></span></strong></p> <p style="text-align: center"><span style="color: rgb(184, 49, 47)"><span style="font-size: 18px"><strong>For all Posted Applications and Lists</strong></span></span></p> <p style="text-align: center"><span style="color: rgb(184, 49, 47)"><span style="font-size: 18px"><strong>1. I am not responsible for damaged Hardware / Software of any kind</strong></span></span></p> <p style="text-align: center"><span style="color: rgb(184, 49, 47)"><span style="font-size: 18px"><strong>2. I do not own or am affiliated to the company / developers linked here</strong></span></span></p> <p style="text-align: center"><span style="color: rgb(184, 49, 47)"><span style="font-size: 18px"><strong>3. This is not a sponsored thread and do this as part of my hobby</strong></span></span></p> <p style="text-align: center"><span style="color: rgb(184, 49, 47)"><span style="font-size: 18px"><strong>4. Have fun and share your findings / experiences</strong></span></span></p> <p style="text-align: center"><strong><span style="color: rgb(184, 49, 47)"><span style="font-size: 18px">>>><<<>>>DISCLAIMER-END<<<>>><<<</span></span></strong></p><p></p><p>I just wanted to document on how to install NextDNS on a Pfsense Firewall box.</p><p></p><p><em>Why install?</em></p><p></p><p>For me it was a "peace of mind" thing since like the most I have a dynamic IP and want to know how each client behaves on the logs. (Self registering over NextDNS api and ID)</p><p></p><p><em><strong>What does it do?</strong></em></p><p></p><p>It installs an alternative to the unbound DNS Server.</p><p></p><p><em>How is the Setup?</em></p><p></p><p>Actually super easy and only requires a NextDNS account if you have more then 300000 Queries. At that point I was not sure how much I needed so I bought a Pro account for my household. (Private/Family)</p><p></p><p><em>Cmon come to the point!</em></p><p></p><p>OK OK - First you need a NextDNS ID (works with temp accounts too) <300,000 Queries - Then the git page -> <a href="https://github.com/nextdns/nextdns/wiki/Installer" target="_blank">nextdns/nextdns</a></p><p></p><p>Then shell access to your pfsense box (SSH) -> Option 8 -> Then use the Install script</p><p>[code]</p><p>sh -c 'sh -c "$(curl -sL https://nextdns.io/install)"'</p><p>[/code]</p><p>Follow the instructions and insert the ID provided by NextDNS</p><p></p><p>1. Disable the Service "unbound" over the WebGUI of the Pfsense box</p><p>2. Delete DNS entries under System -> General Setup</p><p>-> 3. If you have special settings under Services -> DNS Resolver -> Custom Options <span style="color: rgb(184, 49, 47)"><strong>[Caution -> If you use PFblockerNG do not delete the first line to the config!]</strong></span></p><p>-> 4. If you have PFblockerNG installed there is no need for it since NextDNS can handle the workload! [Just double check the NextDNS Logs to see if filters are setup as you want it]</p><p></p><p>after that we go again to the Pfsense shell -> (SSH) -> Option 8</p><p>What we do there is change the cache size -> <a href="https://github.com/nextdns/nextdns/wiki/Cache-Configuration" target="_blank">nextdns/nextdns</a></p><p>[code]</p><p>sh -c "nextdns config set -cache-size=10MB"</p><p>sh -c "nextdns restart"</p><p>[/code]</p><p>AND Only IF -> <strong>"NextDNS with a custom configuration ID is configured!"</strong></p><p>[code]</p><p>sh -c "nextdns config set -max-ttl=5s"</p><p>sh -c "nextdns restart"</p><p>[/code]</p><p>To clear out the cache as explained here -> <a href="https://github.com/nextdns/nextdns/wiki/Cache-Configuration#automatic-cache-invalidation" target="_blank">nextdns/nextdns</a></p><p></p><p>Then test your config with NextDNS...</p><p></p><p><em>What is should do?</em></p><p></p><p>in the logs it should show your devices in the network that request DNS queries. Then all requests should show a lock symbol for DNS over HTTPS - I tested with DNS over TLS but had DNS Leak issues.</p><p></p><p><em>Proof of working config:</em></p><p>[ATTACH]248148[/ATTACH][ATTACH]248147[/ATTACH][ATTACH]248149[/ATTACH]</p><p>[ATTACH]248150[/ATTACH]</p><p></p><p>If more detail is needed just ask I am happy to provide more info.</p><p></p><p>Only If you want to help me out by getting NextDNS there is a Affiliate Link from me -> <a href="https://nextdns.io/?from=4uvdqpqv" target="_blank">NextDNS</a> <- Major Thanks in advance! I'll test some more and post updates... <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite110" alt=";)" title="Wink ;)" loading="lazy" data-shortname=";)" /></p><p></p><p>Best regards</p><p>Val.</p></blockquote><p></p>
[QUOTE="valvaris, post: 911285, member: 38787"] Hello to all, First things First: [CENTER][B][COLOR=rgb(184, 49, 47)][SIZE=5]>>><<<>>>DISCLAIMER-START<<<>>><<<[/SIZE][/COLOR][/B] [COLOR=rgb(184, 49, 47)][SIZE=5][B]For all Posted Applications and Lists 1. I am not responsible for damaged Hardware / Software of any kind 2. I do not own or am affiliated to the company / developers linked here 3. This is not a sponsored thread and do this as part of my hobby 4. Have fun and share your findings / experiences[/B][/SIZE][/COLOR] [B][COLOR=rgb(184, 49, 47)][SIZE=5]>>><<<>>>DISCLAIMER-END<<<>>><<<[/SIZE][/COLOR][/B][/CENTER] I just wanted to document on how to install NextDNS on a Pfsense Firewall box. [I]Why install?[/I] For me it was a "peace of mind" thing since like the most I have a dynamic IP and want to know how each client behaves on the logs. (Self registering over NextDNS api and ID) [I][B]What does it do?[/B][/I] It installs an alternative to the unbound DNS Server. [I]How is the Setup?[/I] Actually super easy and only requires a NextDNS account if you have more then 300000 Queries. At that point I was not sure how much I needed so I bought a Pro account for my household. (Private/Family) [I]Cmon come to the point![/I] OK OK - First you need a NextDNS ID (works with temp accounts too) <300,000 Queries - Then the git page -> [URL='https://github.com/nextdns/nextdns/wiki/Installer']nextdns/nextdns[/URL] Then shell access to your pfsense box (SSH) -> Option 8 -> Then use the Install script [code] sh -c 'sh -c "$(curl -sL https://nextdns.io/install)"' [/code] Follow the instructions and insert the ID provided by NextDNS 1. Disable the Service "unbound" over the WebGUI of the Pfsense box 2. Delete DNS entries under System -> General Setup -> 3. If you have special settings under Services -> DNS Resolver -> Custom Options [COLOR=rgb(184, 49, 47)][B][Caution -> If you use PFblockerNG do not delete the first line to the config!][/B][/COLOR] -> 4. If you have PFblockerNG installed there is no need for it since NextDNS can handle the workload! [Just double check the NextDNS Logs to see if filters are setup as you want it] after that we go again to the Pfsense shell -> (SSH) -> Option 8 What we do there is change the cache size -> [URL='https://github.com/nextdns/nextdns/wiki/Cache-Configuration']nextdns/nextdns[/URL] [code] sh -c "nextdns config set -cache-size=10MB" sh -c "nextdns restart" [/code] AND Only IF -> [B]"NextDNS with a custom configuration ID is configured!"[/B] [code] sh -c "nextdns config set -max-ttl=5s" sh -c "nextdns restart" [/code] To clear out the cache as explained here -> [URL='https://github.com/nextdns/nextdns/wiki/Cache-Configuration#automatic-cache-invalidation']nextdns/nextdns[/URL] Then test your config with NextDNS... [I]What is should do?[/I] in the logs it should show your devices in the network that request DNS queries. Then all requests should show a lock symbol for DNS over HTTPS - I tested with DNS over TLS but had DNS Leak issues. [I]Proof of working config:[/I] [ATTACH alt="PFDash.jpg"]248148[/ATTACH][ATTACH alt="DNSLeak.jpg"]248147[/ATTACH][ATTACH alt="Speed.jpg"]248149[/ATTACH] [ATTACH alt="NextDNSLog.jpg"]248150[/ATTACH] If more detail is needed just ask I am happy to provide more info. Only If you want to help me out by getting NextDNS there is a Affiliate Link from me -> [URL='https://nextdns.io/?from=4uvdqpqv']NextDNS[/URL] <- Major Thanks in advance! I'll test some more and post updates... ;) Best regards Val. [/QUOTE]
Insert quotes…
Verification
Post reply
Top
