pfSense

Steps to reproduce

1. Login to pfsense WebGUI

2. Firewall > Aliases

3. Name = Test

4. Type = Host(s)

5. FQDN = any (example update.microsoft.com)

6. Click "Save"

7. Login to pfsense SSH console

8. # cat /var/log/resolver.log | grep -i update.microsoft.com
May 19 17:59:54 gw-wan-001 filterdns¹⁴⁷⁶²: Adding Action: pf table: Test host: update.microsoft.com
May 19 17:59:54 gw-wan-001 filterdns¹⁴⁷⁶²: Adding host update.microsoft.com

9. # pfctl -T show -t Test

-> Empty

10. # nslookup update.microsoft.com
Server: 62.2.17.61
Address: 62.2.17.61#53

Non-authoritative answer:
    update.microsoft.com    canonical name = update.microsoft.com.nsatc.net.
    update.microsoft.com.nsatc.net  canonical name = www.update.microsoft.com.nsatc.net.
    www.update.microsoft.com.nsatc.net      canonical name = redir.update.microsoft.com.nsatc.net.
    redir.update.microsoft.com.nsatc.net    canonical name = redir.update.msft.com.trafficmanager.net.
    Name:   redir.update.msft.com.trafficmanager.net
    Address: 20.109.209.108

-> Nslookup working.

Any idea why this is happening?

Best regards
Tom