Then you can filter the whitelist with nxFilter.

Then I made the primary DNS Server on pfSense to be 10.127.1.240(which is my nxFilter) and the secondary DNS Server 1.1.1.1 and on NxFilter I have made my upstream DNS Server 10.127.1.254 which points back to pfSense. IPv4 TCP/UDP * * * 53 (DNS) * Block All other DNS Servers

Protocol Source Port Destination Port Gateway Description PfSense 2.5.2 Nxfilter Problem Good night, anyone having trouble getting Nxfilter to work on Pfsense version 2.5.2 Its the latest version of PF I think, I used the GitHub script and made the rules on the firewall. If i change the DNS address on device level to the IP of any other DNS Server it auto-bypass the NxFilter which I understand it will do, thus have I implemented firewall rules to block access to any other dns server, firewall rules as follow. So I run pfSense (10.127.1.254) as the main firewall/router and on a separate device I have NxFilter (10.127.1.240) to filter the DNS content which works great. A blacklist of bad domains in DNS hosts format and Adblock Plus syntax with the purpose of blocking bad domains used for serving advertisements, tracking, mining, and other nasty content.I want to filter web content at the DNS level. A collection of ad block lists for Pi Hole, AdGuard Home, pfBlockerNG, uBlock Origin, and more. Setting up a RaspberryPi Zero with PiHole ad-blocker Curated and well-maintained hostfile to block ads, tracking, cryptomining, and more! Updated regularly. HOSTS file to block most known NSA / GCHQ / C.I.A. When comparing pihole-blocklist and easylists-for-pihole you can also consider the following projects:

Pfsense nxfilter