dot

When should you use "--dns”? How does it function differently than “dhcp-option”? Is its implementation vpn provider-specific? When you use --dns server n transport DoT does it magically encrypt any DNS queries routed over the tunnel, or what actually happens? I use “--dhcp-option” all the...

Hi. I'm using nextdns on my entire LAN, through nextdns CLI on an RT-AX86U Pro. Nonetheless, I noticed that nextdns is bypassed by explicit plain DNS queries. For instance, a query on the likes of [xxx@xxxxx ~]$ nslookup google.com 8.8.8.8 Server: 8.8.8.8 Address: 8.8.8.8#53...

Noob here. Trying to get DoT to work. Here are my setups in the router (pointing only at quad9), and yet according to leak test, I am still visible and logged. Thoughts?

Hi guys, I tried to set up "DNS Privacy Protocol" but it won't stay on when I hit the apply button. I have disabled "DNS Director", to test but not working either (even though it says on the wiki that "DNSDirector still works as before...") RT-AX86U Firmware:3004.388.4 AdGuard Version...

I currently have a DoT server configured on my RT-AC68U (Merlin) router's WAN, and all clients on my network are using it without any issues. However, I now need certain clients to use a different DoT server. As configuring DoT directly on these devices is not possible, I need help setting up a...

Looking at the WAN page, I understand I can assign the DNS instead of just getting it from my ISP. My question is how does this work with selecting "DNS-Over-TLS" under "DNS Privacy Protocol"? It would seem that these settings would compete with each other? Thanks.

Hello, I note that Asuswrt-Merlin has disabled ECS. https://www.snbforums.com/threads/beta-asuswrt-merlin-384-11-beta-is-now-available.56325/page-32#post-487021 But is this disabled by setting the subnet to 0.0.0.0/0? Because I have experienced problems with the use of. dig...

DNS-over-TLS servers Surfnet/Sinodun 1 and Surfnet/Sinodun 2 IPv4&IPv6 (port 443) were disabled, should we replace them with something similar DoT with port 443? Right now only Neutopia works there.

Could anyone please assist in modifying the unbound.conf file to enable DoT/DoH for downstream clients? I am guessing, the lines I need to add are something like the following: interface: 127.0.0.1@853 tls-service-key: "path/to/privatekeyfile.key" tls-service-pem: "path/to/publiccertfile.pem"...

I have AC-66U with 374.43_52E7j9527 and I want it to use my NextDNS DoT server. How can I add custom DoT server like this xxxxx.dns.nextdns.io?

I have setup the two NextDNS servers under WAN with DNS-over-TLS. If looking at "/etc/resolv.conf" it now points to localhost with the entry "nameserver 127.0.0.1". All good so far and it seems to be using Round Robin. I then tried adding these two lines in "dnsmasq.postconf" and with the...

Hello guys, I encountered a problem. I configured DoT on my RT-AC86U using dot.pub. When I used dig '@RT-AC86U' +dnssec o-o.myaddr.google.com TXT to query ECS information, I found that the ECS address was incorrectly configured as a /0 address. This is wrong and will be considered 0.0.0.0/0...

Sorry if it has been asked but I am lately not up to date with Asus firmware features. Is there a native DoH / DoT support on ASUSWRT official firmware or flashing Merlin is required?

I ran into an issue with the RT-AX58U (ASUSWRT 3.0.0.4.386_45898, No AiMesh) router using DNS-over-TLS (DoT Strick or Opportunistic) running over any Guest Network (Guest 2 is set to ap_isolate=0). I am using Google TV and Sony Bravia TV devices. When starting a video from Hulu or HBOMax, the...

Deleted

I understand I can use merlin firmware for DoH/DoT, but just out of curiosity. It'll be a really nice security feature, which they can brag about. Its not like that they'll have to implement it from scratch, clients already exist. All they need to do is make sure it works with their firmware.

I've been running Pihole with cloudflare doh proxy for sometime now. While it works ok, I've been considering ditching it for Asus-merlin built in dot with nextdns. But does DoH/DoT makes any difference. My ISP can still see the IPs i am communicating with and can do reverse dns lookup to see...

Hello guys, I encountered a problem when using DoT: I cannot use a DoT, but the others are working fine. I have no problems when using kdig to test, but I cannot use it in R7000 (Firmware 384.19 by Xwrt-Vortex, CEF 1.3.0.7). I don't know how to test in Router, can someone help me? I know I...

I want my router (ac68u 384_19) to query all dns and use the first one. DNSmasq allows this behaviour however I cannot find a way to do this. I tried fiddling with the dnsmasq.conf file but no luck. I use DoH proxy (https://openwrt.org/docs/guide-user/services/dns/doh_dnsmasq_https-dns-proxy) on...