Click “Save”, then click the refresh button at the top right corner The system default DNS is it self, as we configured it.ħ. Under “DNS Servers”, both fields should be blank. In the main menu, click “Services”, then DHCPv4, then, “LAN” (Inside local network interface)Ħ. Next we will set the DHCP to assign the router as the DNS server to the clients of the network.ĥ. Click “Save”, (apply settings if asked) then click the refresh button at the top right corner Make sure the check box by “WAPD Records” is NOT checked.Ĥ. Set “Outgoing Network Interfaces” to “WAN” (Outside network to modem) You can remove the # comment if necessary, in the custom options box you should have the top entries and preferred DNS server entries example below: server: Next add your preferred DNS server entries, place the entries below the “Forward-tls-upstream…” line:įorward-addr: #įorward-addr: #įorward-addr: #dns.googleįorward-addr: #Īdguard Family Protection DNS # Family Protection DNSįorward-addr: #įorward-addr: # Under “Custom Options” enter the following: server: “DNS Query Forwarding”, “Enable Forwarding Mode” check box should NOT be checked. “TXT Comment Support”, “Create corresponding TXT records” check box should NOT be checked.

next to “IPv6 Link-Local” the “Register IPv6 Link-Local address” check box should NOT be checked. “DHCP Static Mappings” should NOT be checked. “DHCP domain override” should be empty.į. With “DHCP Registration” the “register DHCP leases” check box should NOT be checked.Į. Next to “DNSSEC” Check the “Enable DNSSEC Support” box.ĭ. Change the Network interfaces to “LAN” (your local network, that you want to use the DNS).Ĭ. Make sure the “Enabled” check box is checked.ī. Follow the configuration instructions below:Ī. Click “Services”, then “Unbound DNS”, then “General”Ĥ. Now we will configure Unbound DNS and set TLS certificate bundle and specify public DNS servers.ģ. Also make sure the “Do not use the local DNS service as a nameserver for this system” check box is NOT checked, click “Save”.

This is to ensure the DNS loops back to the router. Under “DNS Servers” delete any entries and make sure all fields are blank. Login to your OPNSense admin panel, go to “System”, click “Settings”, then “General”Ģ. OPNSense Setup Secure Unbound DNS configured with DNS over TLS (DoT)įirst we are going to remove any DNS servers from the routers configuration, and make sure the router gets looped back to itself for DNS quires.ġ.

Adguard theregister