Business CommunityAll ThreadsEnabling on gateway DoH break DNS for all clients
All Threads

Enabling on gateway DoH break DNS for all clients

Enabling on gateway DoH break DNS for all clients

Enabling on gateway DoH break DNS for all clients
Enabling on gateway DoH break DNS for all clients
Wednesday - last edited Friday
Tags: #DNS
Model: ER707-M2  
Hardware Version: V3
Firmware Version: 1.4.2

I need to enable DoH in order to bypass tmobile DNS packet inspection and redirects. 

All of my clients point to the gateway for DNS. I have about 20 local DNS entries so they need to point to the gateway. 

Gateway DNS points to 1.1.1.1 and 8.8.8.8

If I enable DNS Proxy on the gateway, then set DoH to cloudflare and/or google (or any of the other providers listed) DNS stops working for all clients. 

Been going around and around on this for hours. Is there a known DoH Bug?  Is there a better way to make sure tmobile cant see and intercept my DNS queries? I really do not want to have to setup an externnla DNS server.....


Thanks

  0      
0
#1
Options
1 Accepted Solution
Re:Enabling on gateway DoH break DNS for all clients-Solution
Thursday - last edited Friday

 

Thanks - I am going to call this "solved". The problem is on tmobile. However during the troubleshooting I did find out that all DNS requests go out the primary 2.5Gb port on the ER707. The solution was to switch my two providers so the one that wasn't killing my DoH requests is on the primary port. 

Recommended Solution
  0  
0
#4
Options
3 Reply
Re:Enabling on gateway DoH break DNS for all clients
Thursday

  @grahamk 

 

I have been using DoH on several different Omada routers for a long time, including the ER707, and have not noticed any problems.

 

  1  
1
#2
Options
Re:Enabling on gateway DoH break DNS for all clients
Thursday

Hi,  @grahamk 

Thank you for posting on the business network forum.

 

Please try the following steps:

1. Please check the security filtering features of your T‑Mobile gateway and ensure they are disabled.
2. Switch to DNS over TLS (DoT) with local records kept separate, and configure DoT as the upstream.
3. Consider setting up a local DNS server – a lightweight DNS service running on a device behind the gateway – for your internal network.

 

In the meantime, please provide the following information for us:

1. Do you use a controller to manage your devices? If you do, please share the controller type and version to us.
2. Please provide the whole network topology.
3. What are your current DNS settings on the gateway?
 

 

Click Here to Help Us Improve - Omada AP Installation Guide Click Here to Get the Latest Omada SDN Controller Releases Get the Latest Firmware Releases for Omada Routers Here Experience the Latest Omada EAP Firmware
  1  
1
#3
Options
Re:Enabling on gateway DoH break DNS for all clients-Solution
Thursday - last edited Friday

 

Thanks - I am going to call this "solved". The problem is on tmobile. However during the troubleshooting I did find out that all DNS requests go out the primary 2.5Gb port on the ER707. The solution was to switch my two providers so the one that wasn't killing my DoH requests is on the primary port. 

Recommended Solution
  0  
0
#4
Options

Information

Helpful: 0

Views: 212

Replies: 3

Tags

DNS