Unbound DNS with custom filtering options
Unbound DNS with custom filtering options
Before switching to OPNsense, you had two PiHole devices with different settings—your personal content got tighter adblocking while the rest of the family used a lighter configuration. It was tricky to manage without constantly adjusting for everyone else. Now that you're using OPNsense, you can control Unbound to apply stricter adblocking only on your own VLAN, keeping the family's setup simpler.
opnsense offers an adguard plugin with customizable rules for individual clients. It provides more advanced features than pihole but has a less appealing interface. For general DNS blocking, I often use a blocklist. For my 'Smart TV', I restrict access to specific domains so streaming apps work properly. Unbound is available as an alternative option. I prefer the dnscrypt plugin for this setup.
I've stopped using pihole recently because its capabilities aren't very strong. I believe combining two piholes—one per LAN—could address your problem and might be the simplest solution. Regarding MAC details in pihole, do you have access to that information? As for adguard, I moved there since it allows regular expressions, letting me set different rules for each client.