Absolutely. Remember to enable a cron job in the OpnSense - System > Settings > cron to update the Blocklists. Otherwise you are likely out of date.
Comment on Self-Hosting a DNS Sinkhole is really important
trojanbark@lemmy.world 3 weeks ago
Unbound on OPNsense ftw
MuttMutt@lemmy.world 3 weeks ago
Unfold1127@lemmy.world 3 weeks ago
Just moved to an OPNsense network. Setting up unbound was so nice and simple. Much preferred over pihole.
trojanbark@lemmy.world 3 weeks ago
Agreed. I used pihole initially when I was first learning networking, but when I got a dedicated machine and installed OPNsense, I learned how much easier so many things can be.
Unfold1127@lemmy.world 3 weeks ago
The downside is OPNsense is it’s information light, and a bit inscrutable lol I’m having an issue with my WAN dhcp going offline, seems to be happening on a cadence. My modem is fine, connection is valid. Rebooting the OPNsense box fixes it. Losing my mind a bit but I’ll figure it out 🙃
MuttMutt@lemmy.world 3 weeks ago
Try setting a tunable of:
net.link.ether.inet.max_age = 540
By default FreeBSD sets a 20 minute ARP maximum age while many ONT’s set a 9 minute maximum age. This will show up as performance issues initially then cause other issues.
Also Realtek NIC’s are notorious for issues with FreeBSD, so if you are using one replacing it with an Intel one is highly recommended.
Fmstrat@lemmy.world 2 weeks ago
I switched to pihole. Just found it… easier.
trojanbark@lemmy.world 2 weeks ago
I started on pihole, then the devs messed it all up and made it complicated, so I started using unbound on OPNsense and holy poop was it so much easier for me. But I mean as long as everyone is using something, that’s what really matters. Don’t let these corporations take even an inch
Imaginary_Stand4909@lemmy.blahaj.zone 3 weeks ago
I love Unbound bro. Gives a neat list of the noisest domains which I can quickly add to my list if I don’t need that site 😌