Part of the Furniture
Merlin configures dnsmasq to only listen on the LAN interface br0, as well as any pptp interface. If you want what is technically the WAN port to listen for DNS traffic, you need to add a interface=eth0 or interface=vlan2 to /jffs/configs/dnsmasq.conf.add, depending on your WAN interface name. But then you might also need a no-dhcp-interface=eth0 (or vlan2) to avoid DHCP conflicts on the other subnet.I was wondering if Diversion has some built-in rules that make it only accept requests from its own subnet? Or maybe MerlinWRT still has some firewall rules active even though I disabled the Firewall in the GUI?
I'd be happy for any hints where to look or what to check.
I’m not sure that’s a great idea overall, but that’s what you can test. It technically has nothing to do with Diversion, so you might get better advice from your own thread that the few remaining non-Diversion users will also see.