pfSense

ACL on DNS Resolver is not updated list after IPs changed on interfaces.
How to repruduce:
1. Create new interface
2. DNS resolver with default settings with choose ALL int
3. Check ACL on DNS resolver, all network will be presented as allow
4. Change IP on interface
5. Check ACL on DNS resolver, it shows old network, the new won't be presented until restart resolver.
So if the hosts uses default DNS from pfSense interface, they get DNS queries with refuse flag.

Before IP change

Change IP on int

Check ACL, no update, still old network

After restart resolver, the list is updated

The same behaviour on 2.7.0
Also tested on 2.6.0 and it is working fine, no need restart resolver to update ACL list.