LAN - DHCP - prevent auto DoH?

[badaz]

Hi,

I'm using a private DNS server to resolve some hostnames to my LAN IPs since my primary router does not have NAT loopback and I need to access some self hosted services from within my LAN without having to handle different URLs whether I'm am at home or not. Therefore I have set my private DNS server as the main DNS resolver address in LAN - DHCP settings. However some browsers like Firefox desktop or Edge mobile do not allow disabling DoH in their settings and my DNS server is bypassed. One solution is to use the WAN settings to point to my DNS server as well as setting option "prevent auto DoH" to Yes.

I cannot find a similar option in LAN - DHCP that would allow me to leave the WAN config untouched (I really only need that feature on my LAN). Is there any custom script that adds that option? Or else what would it take to implement such a feature?

 

[dave14305]

Can’t you just sinkhole these domains in your private DNS server to mimic the “no auto DoH” feature? Return NXDOMAIN for each.

use-application-dns.net
_dns.resolver.arpa
mask.icloud.com
mask-h2.icloud.com

 

[badaz]

Didn't think of this. I could, but is that list static? Or could it eventually change? Or is it already what the option in WAN does?

 

[dave14305]

Didn't think of this. I could, but is that list static? Or could it eventually change? Or is it already what the option in WAN does?

That’s exactly what Merlin does in dnsmasq.

asuswrt-merlin.ng/release/src/router/rc/services.c at c9f185f24006f281967cd0a418b2e599435ed06e · RMerl/asuswrt-merlin.ng

Third party firmware for Asus routers (newer codebase) - RMerl/asuswrt-merlin.ng

github.com

 

[badaz]

Ok, I didn't realize this one was a Merlin option, tx

 

[badaz]

It works! Thanks. I had to add cloudflare-dns.com to the list for edge android (which does not have a setting to disable secure DNS)