A method to globally disable DNS Booster
Warning, use this at your own risk and only if you know what you are doing. The built in DNS Booster in Firewalla is an amazing tool and if you don't have any need to disable it, don't.
Since I use Pi-hole for my DNS across my entire network, I got tired of having to uncheck the box for every new device or get confused why a particular device wasn't working until I'd remember to go in and unset DNS Booster for it. This set of scripts sets a global policy that bypasses DNS Booster even if the box is checked, alternatively you can leave the global policy alone and unset all the devices. Used in combination, you can set the global policy and uncheck the devices to keep everything pretty.
I've used this for a little bit and tested it through a couple of upgrades and finally decided to share it. Hope this helps someone.
https://github.com/gelsbern/homelab-toolbox/tree/main/firewalla/dnsbooster
-
Yep, completely understand. DNS Booster and pihole don't exactly get along since it doesn't pass the actual client ip over and a few other things where resolution stops working and I absolutely need pihole working for DNS resolution of internal websites etc.. so I had to write this.
-
To me, this is like buying a high quality car and replacing a core system. Maybe not quite the engine, but close. It is true that DNS Booster and pihole overlap meaning you can:
- Leave DNS Booster in place but pihole will see all requests from Firewalla, not devices.
- Disable DNS Booster and pihole will see all requests from devices, but you disable many Firewalla features.
This is a function of pihole. I rejected pihole on that basis as I wasn't willing to make that trade off.
If you want to augment or replace Firewalla Ad blocking, NextDNS CLI allows you to do that without making that choice. DNS Booster sends NextDNS requests including the client info.
Please sign in to leave a comment.
Comments
3 comments