DNSMask
- Thread starter Ritzie
- Start date
Under WAN disable the option to automatically connect with the ISP DNS. You will get two fields to manually enter the DNS servers you wish to use.
That does not make sense. Your LAN PCs should be using your router's IP, which in turn will use the DNS servers that are entered on the WAN page, unless you have the router set to automatically use the DNS servers provided by the ISP. How are you determining that you aren't connecting to the correct nameservers?
I did put opendns servers in the router and did the following test
nslookup -type=txt which.opendns.com. 208.67.220.220
Server: 208.67.220.220
Address: 208.67.220.220#53
Non-authoritative answer:
which.opendns.com text = "I am not an OpenDNS resolver."
Authoritative answers can be found from:
I had posted in the forums of opendns and one of the members stated my "ISP redirects your DNS queries to their own DNS service. Your router settings cannot take effect then."
nslookup -type=txt which.opendns.com. 208.67.220.220
Server: 208.67.220.220
Address: 208.67.220.220#53
Non-authoritative answer:
which.opendns.com text = "I am not an OpenDNS resolver."
Authoritative answers can be found from:
I had posted in the forums of opendns and one of the members stated my "ISP redirects your DNS queries to their own DNS service. Your router settings cannot take effect then."
In that case that response was probably right. There is nothing you can do about it, dnsmasq will have the same interception issue as any other client on your network.
The only way to bypass this entirely would be through a VPN tunnel.
Merlin is there a way to setup the following (see pic) on the router. I cannot see my firewall settings because I'm using pfsense at the moment. I'm hoping an can use the router to do the same thing.
At the moment I cannot see the firewall settings because its an AP mode. I didn't want to make any changes unless I know for sure I can setup the firewall rules pretty much to the pfsense firewall rules.
At the moment I cannot see the firewall settings because its an AP mode. I didn't want to make any changes unless I know for sure I can setup the firewall rules pretty much to the pfsense firewall rules.
Attachments
Without an actual explanation as to what you are trying to do I can only take a wild guess and assume you want certain clients to be forced to use a specific DNS. In that case, it can be done, but you will have to use a custom firmware, and manually configure iptables to do it. It can't be done from the webui.
Yes, but through SSH, not the webui.
Some sample rules here: https://github.com/RMerl/asuswrt-merlin/wiki/Iptables-tips
Just adjust them to add a source IP in your rule (-s 192.168.1.123)
I can pretty much use exactly what is in the wiki correct?
iptables -I FORWARD 1 -p udp -o `nvram get wan0_ifname` -d 208.67.222.222 --dport 53 -j ACCEPT
iptables -I FORWARD 2 -p udp -o `nvram get wan0_ifname` -d 208.67.220.220 --dport 53 -j ACCEPT
iptables -I FORWARD 3 -p udp -o `nvram get wan0_ifname` --dport 53 -j DROP
I want to run this by you first before actually doing it.
Edit: I got it working.
iptables -I FORWARD 1 -p udp -o `nvram get wan0_ifname` -d 208.67.222.222 --dport 53 -j ACCEPT
iptables -I FORWARD 2 -p udp -o `nvram get wan0_ifname` -d 208.67.220.220 --dport 53 -j ACCEPT
iptables -I FORWARD 3 -p udp -o `nvram get wan0_ifname` --dport 53 -j DROP
I want to run this by you first before actually doing it.
Edit: I got it working.
Last edited:
