Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 13 replies
  • Subscribers 2 subscribers
  • Views 10491 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Force use of OpenDNS on my network

bblank
Noob question here...  feel free to point me to documentation.

What is the "best" way to force the users of my network to use OpenDNS?  

Firewall rules for the DNS Protocol?  DNS Forwarder?  Routing Profiles?

Thanks for advice, opinions and even random thoughts.

Bob.


This thread was automatically locked due to age.
Parents
  • 0
    Hi, the firewall rule shouldn't be needed, but you do need to have the DNS 'proxy' allowing the internal networks.

    Barry
  • 0 in reply to BarryG
    OK... after much testing... I've got it.  

    1. DHCP server assigns clients OpenDNS as their DNS servers.
    2. DNS Services - Global tab:   Internal Network is allowed to use UTM as DNS server
    3. DNS Services - Forwarders tab: OpenDNS servers are listed as forwarders, uncheck the box to use ISP assigned forwarders
    4. DNAT Rule: 
    Traffic from: Internal (Network)
    Using:          DNS
    Going to:     Internet IPv4

    Change Destination to: Internal (Address)
    Service to:   DNS

    No automatic firewall rule needed. (but works if you choose to use it)


    Even if clients set their DNS servers manually, this setup still re-directs them to the OpenDNS servers.

    Thanks for the pointers.

    Bob Blank[:)]
  • 0 in reply to bblank
    All-

    The default install of astaro places a DNS allow rule at the top of the list. Can't that rule be edited to block all outbound DNS from the internal network? The other choice would be to disable or delete the rule? Just a thought....


    Regards,
    Jim
Reply
  • 0 in reply to bblank
    All-

    The default install of astaro places a DNS allow rule at the top of the list. Can't that rule be edited to block all outbound DNS from the internal network? The other choice would be to disable or delete the rule? Just a thought....


    Regards,
    Jim
Children
No Data
Unfiltered HTML