IPv4 Address: Set as 192.168.2.1 (must be on separate network from LAN network).

IPv4: Change from None to Static IPv4 (which just means it's statically assigned, not dynamic).

Description: Rename from OPT1 to DMZ (so I recognize it).

You'll see that the name is called OPT1.

You'll see a Interface has been added message on top.

You'll see WAN, LAN, a new entry 'Available network ports' (if you don't see this, it means something failed, go back to recheck your steps).

If you installed Pfsense on Bare Hardware, read this (otherwise skip to next step): # If you bought a security appliance from Netgate, then you don't need to buy anything else.Cable connected to one device, Pihole (running in Raspberry Pi or another hardware of your choice).I assigned this as DMZ Network in Pfsense.There is a cable going to my Modem (and out to the internet).

I assigned this as WAN Network in Pfsense.

Cable attached to my switch, so all devices can communicate.I assigned this as LAN Network in Pfsense.Onboard network card attached to motherboard.If you're building the pfsense box from spare computer parts:.With that knowledge, we can continue with this guide.I'm assuming you already know how to setup Pihole.My recommendation is to get 2 of 1gbps Intel NICs because they are super cheap. You have a spare hardware, with 3 NICs.My recommendation is cheapest unit, US$179 SG-1100. Bought a Pfsense directly from Netgate.Let's setup a system that transparently intercepts and redirects ALL DNS traffic to an internal DNS of our choice (Pihole).What this means is that the DNS traffic will reach out through the firewall to the public DNS, ignoring what your firewall's preferred DNS server is.Some devices like to use their hardcoded DNS servers.

Pfsense raspberry pi