Also is there a way to block or force DoT/DoH to go through port 53 to my pi-hole? Any help would mean a lot to me since i won't be able to deploy the new system until i figure this thing out, because my current setup is working with pi-hole (I want to minimize the level of tracking inside the network). I would also like to block any other traffic for hardcoded dns servers on not safe devices, so nothing is getting around the pi-hole.

I was looking at solutions on different websites, but my main concern was that i won't be able to see the IP/mac address of the device who requested it, only the firewall's (OPNsense) IP address, which isn't ideal for me. My OPNsense is a custom x86/64 based system with a dual port intel nic. I would like to use pi-hole with it's feature to see who requested what domain, because it will be easier for me to block certain domains this way. I'm currently running pi-hole on a raspberry, but without unbound.

Hi, I'm new to the whole OPNsense forum and also to firewalls.

Opnsense pihole