mustardquail
Occasional Visitor
Hello,
I am trying to use DNS Director to force all clients to use my DNS server on the network. I've enabled and tested DNS Director, and for most cases, it seems to work as intended and I see this traffic hitting my DNS server as it should. However, when I manually configure my Mac to use something like 9.9.9.9 and run a dig trace from this machine, I see that my queries/lookups are not being sent to my local DNS server; they go through to 9.9.9.9.
My understanding was that DNS Director is supposed to force this traffic to go to my local DNS server, but I might be misunderstanding how it handles clients who have set manual DNS servers. What I'm hoping to do is to force/redirect all DNS traffic regardless of manual DNS server; I feel like many tracking/ad services likely have their own hardcoded DNS settings like this that can easily bypass my local DNS server, so this is an attempt to halt this bypass. (Open to any recommendations for handling any sidestepped with DoH/DoT as well!)
On Asuswrt-Merlin, is there a recommended iptables script or similar that I can use to force all DNS (even manual like this) to my local DNS server?
I am trying to use DNS Director to force all clients to use my DNS server on the network. I've enabled and tested DNS Director, and for most cases, it seems to work as intended and I see this traffic hitting my DNS server as it should. However, when I manually configure my Mac to use something like 9.9.9.9 and run a dig trace from this machine, I see that my queries/lookups are not being sent to my local DNS server; they go through to 9.9.9.9.
My understanding was that DNS Director is supposed to force this traffic to go to my local DNS server, but I might be misunderstanding how it handles clients who have set manual DNS servers. What I'm hoping to do is to force/redirect all DNS traffic regardless of manual DNS server; I feel like many tracking/ad services likely have their own hardcoded DNS settings like this that can easily bypass my local DNS server, so this is an attempt to halt this bypass. (Open to any recommendations for handling any sidestepped with DoH/DoT as well!)
On Asuswrt-Merlin, is there a recommended iptables script or similar that I can use to force all DNS (even manual like this) to my local DNS server?
