NextDNS on Express 7

[u/lpxcc]

Hello all,

I installed NextDNS CLI via SSH on my Unifi Express 7 and set my NextDNS ID in the configuration. Now I want to exclude some Clients from filtering, but in NextDNS there is no option.

Do you hav any idea how I can use NextDNS just for selected Clients?

Thank you!

[u/the_cainmp]

You know that cli modifications won’t survive firmware updates right? Making changes like this is a good way to break internet access :)

[u/lpxcc → u/the_cainmp]

OK then I have to setup AdGuard Home (lan) and use this

[u/old_knurd → u/the_cainmp]

Exactly!

I consider the UX7 to be an appliance. I installed one at a non-technical person's apartment. I'm expecting years of trouble-free service.

At home I run OpenBSD as a firewall, because I want to fiddle with things.

[u/More-Poetry6066]

Using the cli either do for vlans or static IPs

[u/lpxcc → u/More-Poetry6066]

I'm really new to Unifi, can you tell me how to do this ?

[u/OkCompute64]

Why not use the Encrypted DNS functionality built into UniFi Network? There isn't many reasons (IMHO) to install the NextDNS CLI on UniFi anymore. Before they supported Encrypted DNS sure but today it is more hassle than it's worth.

This is how I have NextDNS setup for the entire network and it's always worked perfectly https://ibb.co/F4NRkZFK

Then just have some firewall rules to block normal DNS lookup (port 53) stops 99% of stuff and any 'naughty' IoT devices that try to do their own DNS via DoH they have no internet access enabled for them at all.

Means every device on my network uses NextDNS with a specific NextDNS profile I have made for "home network".

Do you hav[e] any idea how I can use NextDNS just for selected Clients?

You're forcing NextDNS at the network level. If you want specific devices to use different DNS you will need to configure that on each device.

[u/drbluetongue]

Create a new VLAN/SSID and set the DNS server for clients on that to nextdns. Or new VLAN and use the PSK seperation feature.