This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Force use of OpenDNS on my network

Noob question here...  feel free to point me to documentation.

What is the "best" way to force the users of my network to use OpenDNS?

Firewall rules for the DNS Protocol?  DNS Forwarder?  Routing Profiles?

Thanks for advice, opinions and even random thoughts.

Bob.

This thread was automatically locked due to age.

Parents

0 BarryG over 11 years ago

Hi, the firewall rule shouldn't be needed, but you do need to have the DNS 'proxy' allowing the internal networks.

Barry
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BarryG over 11 years ago

Hi, the firewall rule shouldn't be needed, but you do need to have the DNS 'proxy' allowing the internal networks.

Barry
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 bblank over 11 years ago in reply to BarryG

OK... after much testing... I've got it.

1. DHCP server assigns clients OpenDNS as their DNS servers.
2. DNS Services - Global tab:   Internal Network is allowed to use UTM as DNS server
3. DNS Services - Forwarders tab: OpenDNS servers are listed as forwarders, uncheck the box to use ISP assigned forwarders
4. DNAT Rule:
Traffic from: Internal (Network)
Using:          DNS
Going to:     Internet IPv4

Change Destination to: Internal (Address)
Service to:   DNS

No automatic firewall rule needed. (but works if you choose to use it)

Even if clients set their DNS servers manually, this setup still re-directs them to the OpenDNS servers.

Thanks for the pointers.

Bob Blank[:)]
Cancel
Vote Up 0 Vote Down

Cancel
0 scottj_01 over 11 years ago in reply to bblank

All-

The default install of astaro places a DNS allow rule at the top of the list. Can't that rule be edited to block all outbound DNS from the internal network? The other choice would be to disable or delete the rule? Just a thought....

Regards,
Jim
Cancel
Vote Up 0 Vote Down

Cancel