DNS Blocking not working
This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
DNS Blocking not working
Model :
Hardware Version :
Firmware Version :
ISP :
I'm trying to block access to a certain DNS (8.8.8.8). Now, instead of blocking this address using Access Control (Deny), I've turned it around and used Access Control (Allow). There are reasons for this that are a little complicated that don't really matter at this stage. I've set up some simple rules to do what I think should work but I've had no luck
First of all I've set the router DNS to 8.8.8.8 and 208.67.222.222 (OpenDNS).
In Access Control I've selected Allow setting and have 3 rules:
I'm on a machine with IP address 192.168.1.111. Now, as far as I can tell, the rules above should only allow traffic through to 208.67.222.222 AND IPs between 192.168.1.1 <> 192.168.1.118 on all ports EXCEPT port 53, which is the DNS port. Thus, 208.67.222.222 as a DNS will work (allowed by the first rule) but 8.8.8.8 Port 53 should NOT work because it won't be allowed by any of the rules. However, it's still using 8.8.8.8 as a DNS.
Can someone from TP-Link confirm this bug?
Hardware Version :
Firmware Version :
ISP :
I'm trying to block access to a certain DNS (8.8.8.8). Now, instead of blocking this address using Access Control (Deny), I've turned it around and used Access Control (Allow). There are reasons for this that are a little complicated that don't really matter at this stage. I've set up some simple rules to do what I think should work but I've had no luck
First of all I've set the router DNS to 8.8.8.8 and 208.67.222.222 (OpenDNS).
In Access Control I've selected Allow setting and have 3 rules:
Rule Name |
Host |
Target |
Schedule |
OpenDNS |
192.168.1.1-192.168.1.199 |
208.67.222.222 |
Permanent |
Good Machines Low |
192.168.1.1-192.168.1.118 |
Ports 1-52 |
Permanent |
Good Machines High |
192.168.1.1-192.168.1.118 |
Ports 54-65535 |
Permanent |
I'm on a machine with IP address 192.168.1.111. Now, as far as I can tell, the rules above should only allow traffic through to 208.67.222.222 AND IPs between 192.168.1.1 <> 192.168.1.118 on all ports EXCEPT port 53, which is the DNS port. Thus, 208.67.222.222 as a DNS will work (allowed by the first rule) but 8.8.8.8 Port 53 should NOT work because it won't be allowed by any of the rules. However, it's still using 8.8.8.8 as a DNS.
Can someone from TP-Link confirm this bug?