Preventing circumvention of OpenDNS

[BrianE]

I was wondering if the the Orbi systems can be set up to prevent by-passing the router DNS settings, e.g. OpenDNS, by client users changing the DNS settings on their devices. Some routers can do this, including the one I have at the moment and I have seen some reference to adding firewall rules to block port 53 to achieve this objective. Can anyone confirm whether this can be done with the Orbi system and if so, what are the steps that need to be taken to achieve this?

[OrbiPhilip · Accepted solution]

DNS runs on port 53. It you block it from all clients, they cannot change DNS. 

Advanced -> Security - Block Services
Service Type = DNS

To avoid potential problems with network gear, I recommend seting the range to match your DHCP range.

https://preview.ibb.co/bAe1tF/dns.png

[OrbiPhilip · Accepted solution]

DNS runs on port 53. It you block it from all clients, they cannot change DNS. 

Advanced -> Security - Block Services
Service Type = DNS

To avoid potential problems with network gear, I recommend seting the range to match your DHCP range.

https://preview.ibb.co/bAe1tF/dns.png