Absolutely. Remember to enable a cron job in the OpnSense - System > Settings > cron to update the Blocklists. Otherwise you are likely out of date.
Comment on Self-Hosting a DNS Sinkhole is really important
trojanbark@lemmy.world 5 days ago
Unbound on OPNsense ftw
MuttMutt@lemmy.world 4 days ago
Unfold1127@lemmy.world 4 days ago
Just moved to an OPNsense network. Setting up unbound was so nice and simple. Much preferred over pihole.
trojanbark@lemmy.world 4 days ago
Agreed. I used pihole initially when I was first learning networking, but when I got a dedicated machine and installed OPNsense, I learned how much easier so many things can be.
Unfold1127@lemmy.world 4 days ago
The downside is OPNsense is it’s information light, and a bit inscrutable lol I’m having an issue with my WAN dhcp going offline, seems to be happening on a cadence. My modem is fine, connection is valid. Rebooting the OPNsense box fixes it. Losing my mind a bit but I’ll figure it out 🙃
MuttMutt@lemmy.world 4 days ago
Try setting a tunable of:
net.link.ether.inet.max_age = 540
By default FreeBSD sets a 20 minute ARP maximum age while many ONT’s set a 9 minute maximum age. This will show up as performance issues initially then cause other issues.
Also Realtek NIC’s are notorious for issues with FreeBSD, so if you are using one replacing it with an Intel one is highly recommended.
Imaginary_Stand4909@lemmy.blahaj.zone 4 days ago
I love Unbound bro. Gives a neat list of the noisest domains which I can quickly add to my list if I don’t need that site 😌