FYI: OPNsense now was pretty (good) Unbound DNS reporting

Submitted ⁨⁨1⁩ ⁨year⁩ ago⁩ by ⁨iodine0320@lemmy.world⁩ to ⁨selfhosted@lemmy.world⁩

https://docs.opnsense.org/manual/reporting_unbound_dns.html

Today I decided I would create some way of visualizing my unbound DNS requests/blocks on OPNsense. Adguard does a good job at this but I have issue with added third party repos and plugins, especially at the router level.

Anyway…since the last time I’ve dug into this OPNsense now has built in Unbound DNS reporting (since 23.1) and it’s amazing! Arguably just as good as Pihole or Adguard. Graphs, lists of top blocked and allowed domains, query logs, quick buttons to block or whitelist next to each domain. I’m impressed.

Not sure if this is the right community, but just wanted to share if some of you weren’t aware of this option.

source

Comments

Sort:hotnew top

NightAuthor@lemmy.world ⁨1⁩ ⁨year⁩ ago
Ugh, I want to build an opnsense router but I can’t go spending unnecessarily until I find a job.

Anyone hiring an IT admin and/or software engineer in the Portland area?

source
- ikidd@lemmy.world ⁨1⁩ ⁨year⁩ ago
  If you have a Proxmox box with 2 NICs, it requires very little resources as a VM.
  
  source
Lem453@lemmy.ca ⁨1⁩ ⁨year⁩ ago
I’ve been rocking an ali express mini PC since 2017, started with pfsense for a year and ditched it when the devs had multiple public tantrums. Opnsense ever since then. It’s been rock solid and super stable since. Super happy I went with it!

source
MonkCanatella@sh.itjust.works ⁨1⁩ ⁨year⁩ ago
So this would basically allow me to use unbound as a DNS filter and resolver? Any reason why one would use adguard/blocky in their setup? Would it be more performant to use blocky + unbound, or have all your filtering done using unbound?

source
- xtremeownage@lemmyonline.com ⁨1⁩ ⁨year⁩ ago
  
  unbound as a DNS filter and resolver
  
  Its… worked as a recursive resolver, with filtering/blacklist features for years now?
  
  source
  - MonkCanatella@sh.itjust.works ⁨1⁩ ⁨year⁩ ago
    That’s cool, so why would someone run pihole/adguard/blocky with unbound?
    
    source
    -> View More Comments
Decronym@lemmy.decronym.xyz ⁨1⁩ ⁨year⁩ ago
Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I’ve seen in this thread:

Fewer Letters More Letters

DNS Domain Name Service/System

HA Home Assistant automation software

~ High Availability

IP Internet Protocol

[Thread #260 for this sub, first seen 2nd Nov 2023, 20:10] [FAQ] [Full list] [Contact] [Source code]

source
ikidd@lemmy.world ⁨1⁩ ⁨year⁩ ago
I think you can also export to graphana via Prometheus if you want to get fancy.

source
thisisawayoflife@lemmy.world ⁨1⁩ ⁨year⁩ ago
This is good to know as I’ll be seeing up a new opnsense router in the next few weeks.

source
- iodine0320@lemmy.world ⁨1⁩ ⁨year⁩ ago
  Alot of useful info in this guide if your new to OPNsense.
  
  source
flux@lemmy.world ⁨1⁩ ⁨year⁩ ago
I didn’t know. I’ll have a look. thanks for sharing.

source

Fewer Letters	More Letters
DNS	Domain Name Service/System
HA	Home Assistant automation software
~	High Availability
IP	Internet Protocol