DNS lookup [Solved]

[pankaj]

Hi,

I am using Unbound DNS which is working fine but seems like the option to use it for machines on the LAN is optional as I was able to select a DNS server of my choice.

Code: [Select]

pm@mhome:~$ nslookup
> ibm.com
Server: 127.0.0.53
Address: 127.0.0.53#53

Non-authoritative answer:
Name: ibm.com
Address: 96.6.233.216
Name: ibm.com
Address: 2600:1406:3c:389::3831
Name: ibm.com
Address: 2600:1406:3c:38a::3831
> server 8.8.8.8
Default server: 8.8.8.8
Address: 8.8.8.8#53
> ibm.com
Server: 8.8.8.8
Address: 8.8.8.8#53

Is there a way to force LAN clients to use Unbound DNS and not be able to go to the WAN side for DNS queries?
Thanks.

[RamSense]

I think this is the info you are looking for:

https://homenetworkguy.com/how-to/redirect-all-dns-requests-to-local-dns-resolver/

[tong2x]

in my case, for may guest network, I block all outgoing DNS request to except the firewall IP

action: block
interface: guestnet
TCP: ipv4
prto: tcp/udp
source: guestnet net
Destination / Invert: checked (basically all NOT firewall)
destination: firewall address
destination port: DNS

I use invert function, but you could used "any", just make a rule above that will allows your firewall DNS first

[pankaj]

Thanks, exactly what I was looking for!!

[axsdenied]

Just a heads up, this doesn't block DoT or DoH DNS queries, only starndard port 53 udp queries.

[tong2x]

good point there