We setup open dsn on our router which works quite well at blocking domains we wish to block.
Some users have figured out changing their domain name server on their pc will get around it.
I want to block a dns IP outbound with our router (Linksys RV042) .. i was able to add an access rule that stops pinging to the dns ip, but it still functions as a dns server.
The rule looks as follows:
Action: Deny
Service All Traffic[TCP&UDP/1~65535
Log: no
Source Interface: LAN
Source: Any
Destination: single : 65.39.192.130
yes, with this on ping 65.39.192.130 times out, but surfing with this as dns server works fine.
What can I do?
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Seems I found my answer. Tere are 4 RV042 default rules that cannot be trumped.
Custom rules can be created to override the RV042 default rules, but there are four additional default rules that will be always active, and custom rule can not override the four rules.
* HTTP service from LAN side to RV042 is always allowed.
* DHCP service from LAN side is always allowed.
* DNS service from LAN side is always allowed.
* Ping service from LAN side to RV042 is always allowed.
grr. Anyone have any ideas?
If there are from LAN to your router, it doesn't mean that they can access to same services in the Internet. these rules are set so you can always use your router services. If you could disable the HTTP access to your router, you would break the path to connect to your router for config. So they must always be there.
Business Accounts
Answer for Membership
by: AmirchoupaniPosted on 2009-01-17 at 12:17:46ID: 23402233
At first don't forget that there are a lot of DNS servers in the Internet (like famous 4.2.2.4) that your users can use them as their DNS server and .... So you need to Block all DNS queries.
DNS use normally UDP 53 and sometimes (for larger packets) TCP 53. So you need to block all traffic send to TCP/UDP 53 for all destinations.
In this situation (MAYBE) your users will try to use proxy servers to bypass your lock :)
Good Luck