• March 28, 2024, 01:37:19 PM
  • Welcome, Guest
Please login or register.

Login with username, password and session length
Advanced search  

News:

This Forum Beta is ONLY for registered owners of D-Link products in the USA for which we have created boards at this time.

Pages: [1] 2

Author Topic: Is it even possible to block Google DNS on 850L B1?  (Read 11191 times)

cacatnow

  • Level 1 Member
  • *
  • Posts: 14
Is it even possible to block Google DNS on 850L B1?
« on: April 08, 2018, 11:37:51 AM »

I saw a post on other site you can block Google DNS by using "access control". Now how do I access it on B1 hardware?
I tried using static route option that just does not work.
I saw screenshot of A1 router page they have that orange UI which includes access control settings. Am I missing something or is it not possible on B1?
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: Is it even possible to block Google DNS on 850L B1?
« Reply #1 on: April 08, 2018, 12:59:10 PM »

Link>Welcome!

  • Link>What Firmware version is currently loaded? Found on the routers web page under status.
  • What region are you located?

Is there anything under Firewall or Port Forwarding?

Rev B models have different UI and them. Some features were removed in Rev B models.
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.

cacatnow

  • Level 1 Member
  • *
  • Posts: 14
Re: Is it even possible to block Google DNS on 850L B1?
« Reply #2 on: April 08, 2018, 05:22:37 PM »

No such thing as "status". It is listed at the top of the page. It is FW2.09. I am in Asia. It came from my ISP.

Some features were removed in B models? That sucks. I need to block Google DNS.

I tried using Firewall to block it but it does not work. I don't know if it is my settings or it just refuses to work I'm not good at these things.

Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: Is it even possible to block Google DNS on 850L B1?
« Reply #3 on: April 08, 2018, 08:41:55 PM »

You might ask your ISP if they can help you block Google DNS.
if this router came from them, they maybe handling the FW on the router. Some ISPs do this, which D-Links stock FW may not work on it.

Another suggestion, find a DDNS service and use it's DNS IP addresses on the router and enable DNS Relay. This will use specific DNS for all connected devices. You can set up blocking of sites and such with the DDNS service.

Last resort, you might try some 3rd party FW like DD-WRT or OpenWRT if they support his model router.
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.

cacatnow

  • Level 1 Member
  • *
  • Posts: 14
Re: Is it even possible to block Google DNS on 850L B1?
« Reply #4 on: April 08, 2018, 09:45:10 PM »

Unfortunately I don't think my ISP offers this kind of service. I tried asking them once they ask me to contact DLink support instead.

DDNS? I don't know how to set it up. Also I don't think it will work on chromecast as this is the only device I want to block Google DNS from as chromecast always use hardcoded DNS. Blocking Google DNS from the router is the only way to bypass this.

DD-WRT and OpenWRT do not support this router.

Anyway thanks for the reply.
« Last Edit: April 08, 2018, 09:49:59 PM by cacatnow »
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: Is it even possible to block Google DNS on 850L B1?
« Reply #5 on: April 08, 2018, 10:15:49 PM »

Just curious, why are you wanting to block Googles DNS on ChormeCast? Wont that break it's operation?

If the router has stock fW, you can try loading D-Links FW on it however I don't think you'll still be able to block DNS.

Under firewall, have you tried setting up a IPv4 rule and input the Google DNS address(s) in and try this? Try using a local IP address or give same address as the CC to feed back on. Not sure if this would work either.

Enter a Name for the new rule.
Enter the Source IP Address Range that the rule applies to. Using
the drop-down menu, specify whether it is a WAN or LAN IP address.
Enter the Destination IP Address Range that the rule applies to.
Using the drop-down menu, specify whether it is a WAN or LAN IP
address.
Select the protocol of the traffic to allow or deny (Any, TCP, or UDP)
and then enter the range of ports that the rule will apply to.
Use the drop-down menu to select a Schedule when the rule will
be enabled. The schedule may be set to Always Enable, or you can
create a schedule from the Schedules section (refer to page 71 of the user manual).
Click Apply when you are done.
The IPv4/IPv6 Rules section allows you to specify the kind of traffic that is allowed to pass through the network.

You can set a schedule to not allow or disable this.
« Last Edit: April 08, 2018, 10:24:44 PM by FurryNutz »
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.

cacatnow

  • Level 1 Member
  • *
  • Posts: 14
Re: Is it even possible to block Google DNS on 850L B1?
« Reply #6 on: April 08, 2018, 11:28:52 PM »

If you block Google DNS the chromecast will fall back to the DNS set up on the router.

I don't know if the FW is stock or not. It has blue/white UI.

I already tried IPv4 rule but I don't know exactly what values to enter. I tried a lot of numbers/IP into the box but it does not seem to work.
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: Is it even possible to block Google DNS on 850L B1?
« Reply #7 on: April 09, 2018, 10:08:59 AM »

You'll have to find out the DNS addresses the CC uses. I would run wireshark and see if you can see what the CC is using. Might do a search on line and see if there is any information on this. Then input those addresses in to the rules. Try to point them to fake local IP address or change WAN to both LAN. Not sure if this will work or not. Worth a try.
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.

cacatnow

  • Level 1 Member
  • *
  • Posts: 14
Re: Is it even possible to block Google DNS on 850L B1?
« Reply #8 on: April 09, 2018, 11:15:10 AM »

Obviously chromecast only uses Google DNS, which I'm trying to block. Unless there are other DNS it uses which I don't know. But I'm fairly certain it only uses Google DNS.

Input those address on which box? How to even point them to fake local IP? Sorry I'm totally sucks at this.

Here is an image on my firewall page for your reference.

 
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: Is it even possible to block Google DNS on 850L B1?
« Reply #9 on: April 09, 2018, 01:00:02 PM »

In put the DNS IP address into source box change to LAN and set 192.168.0.254 as the destination and change to LAN. Port set to any or udp.

see if this works.
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.

cacatnow

  • Level 1 Member
  • *
  • Posts: 14
Re: Is it even possible to block Google DNS on 850L B1?
« Reply #10 on: April 09, 2018, 04:03:32 PM »

So I put the values like you suggested. I put 53 into port range because it does not let me leave it empty and set it to any. When I click save, it does not prompt me to reboot router. Tried to ping Google DNS, I still get replies. Rebooted the router, guess what? Still get replies from Google DNS.
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: Is it even possible to block Google DNS on 850L B1?
« Reply #11 on: April 09, 2018, 04:25:20 PM »

Probably not going to work then.
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.

cacatnow

  • Level 1 Member
  • *
  • Posts: 14
Re: Is it even possible to block Google DNS on 850L B1?
« Reply #12 on: April 09, 2018, 04:33:47 PM »

Welp. Thanks for the replies. I guess I'll just have to live with it or buy a new router
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: Is it even possible to block Google DNS on 850L B1?
« Reply #13 on: April 09, 2018, 04:35:00 PM »

So if you have DNS relay enabled on the router and you input manual DNS into the routers Internet section, Does the CC still use it's own DNS or will it use the routers DNS?
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.

cacatnow

  • Level 1 Member
  • *
  • Posts: 14
Re: Is it even possible to block Google DNS on 850L B1?
« Reply #14 on: April 10, 2018, 12:48:54 AM »

CC will always use hardcoded Google DNS unless it is blocked. I have disabled DNS Relay since Day 1. I also experimented the firewall by inputing my current DNS and my laptop's IP address, then used wireshark. I still get DNS responses. As of now I am certain this firewall refuses to work no matter what values I put in.
« Last Edit: April 10, 2018, 12:50:57 AM by cacatnow »
Logged
Pages: [1] 2