NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Solved
SRX5308 Block External DNS
I have a small office of engineers. I use OpenDNS as a web filter. Some of them have figured out if they change their DNS settings to point to an external DNS server that they can browes the web...
DaneA,
Thanks for the response.
I found the solution there:
Hi dgordon11,
Welcome to the community! :)
Let us try this. Here are the steps below:
1. On the web-GUI of the SRX5308, go to Security > Firewall > LAN WAN Rules.
2. Change the Default Outbound Policy to Block Always then click the Apply button beside it.
3. Based from the screenshot you have posted, delete the Service Names "DNS:TCP" because DNS servers listens to UDP port 53.
4. Enable the Service Names "DNS:UDP" you have configured.
5. Check if it works.
As reference, kindly read pages 145-146 of the SRX5308 reference manual here about Changing the Default Outbound Policy and Existing IPv4 Rules.
Regards,
DaneA
NETGEAR Community TeamDaneA,
Thanks for the response.
I found the solution there:
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
