After you have been diligent enough to configure pfSense to act as a DNS server, it would be a shame if end users on your network could circumvent pfSense and specify whatever DNS server they want. Yet that's exactly what most modern OS allow the end user to do. Thus, even if we have set up pfSense to act as the DNS server for the local network, the user's computer will bypass pfSense and go directly to 8.8.4.4. Other than the fact that the user is subverting the policy we were trying to enforce, this is bad for a number of reasons:
- Every time the user accesses a site that requires a new DNS lookup, his computer will only cache the results on his computer. If the user had used pfSense as his DNS server, the results of ...
