Hi, I'm using regular PFBlockerNG (as far as I can tell - I can't see any dev reference in the menus). I am blocking malicious domains.
I've switched DNS Resolver back on with DNSSec disabled as you suggested. I've also allowed DNS records with a TTL=0 under Advanced settings, which I think was mentioned earlier in the thread.
There's no immediate packet loss showing, but it can take a while to develop. I'll keep monitoring.
Would be good to understand the cause of this problem and what Resolver setting is implicated.
Thanks...