Securing the network: Firewalla 3rd party VPN, DoH, AdBlock

Hi,

I just received my Firewalla purple box and I am new to the secure network setup.

I'm trying to understand if DNS queries are done with VPN server origin or from the Firewalla box. Could you please help with some additional details?

I have the following setup:

Firewalla Purple, router mode
3rd party VPN configured, Force DNS over VPN off (Ad Block) - apply to group1
Lan network -> IPv6 off (VPN supports only v4)
Ad Block enabled, strict - all devices
DoH (DNS over HTTPS), all out of the box DNS servers on - apply to group1

Testing done from device in group1 (VPN applied):

1. Check flows for group1 - I could not find DNS queries logged in flows. Are there any logs for DNS queries?

2. Validate IP (what is my ip or similar service) - All good, VPN IP

3. Validate DNS leak (https://www.dnsleaktest.com/) - VPN IP, standard test with configured FW DNS servers.

The question is: Who is doing the DNS query (FW or VPN server)?

Thanks!

Support Team

March 08, 2022 06:23

Yes, it's on our todo list, although there is a little tech issue that we need to deal with.

Thanks for the feedback!

Firewalla

March 01, 2022 23:02

When you lock DNS to VPN, all DNS traffic will be directly forwarded to your VPN without firewalla redirecting it.

Alex Chiraples

March 07, 2022 17:05

This means I would have to chose between:

Firewalla AdBlock with DoH, no 3rd party VPN for DNS traffic
No Firewalla AdBlock, DNS traffic forwarded to 3rd party VPN

Any plans on making AdBlock available with DNS over 3rd party VPN?

Dom P

March 13, 2022 04:11

AdBlock in conjunction with DNS over 3rd party VPN would be very useful.

Your current plans to support unbound are also a step in the right direction privacy-wise. When using unbound will it be possible for unbound's DNS requests to traverse the VPN?

March 14, 2022 06:45

Yes, we are doing some experiments on that.

Securing the network: Firewalla 3rd party VPN, DoH, AdBlock

Comments

Didn't find what you were looking for?