NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Preventing circumvention of OpenDNS with firewall rules
Hi, I am attempting to set up my FVS318Gv2 Firewall so it will block all DNS queries that are not from OpenDNS. I was using this article for reference. To do this, I created a list of outbound rules. The first two I have block all DNS for UDP and TCP. The next four allow DNS on OpenDNS IPs. According to the manual, this is the correct order "you should place the most strict rules at the top" My hope was that the allow rules would override the block rules. According to OpenDNS's Documentation: "The first rule trumps the second rule, so anything requests to OpenDNS are allowed but any DNS requests to any other IP are blocked." I've tried adding these in the reverse order and using port 53 instead of the built in services but whatever I try blocks all DNS requests. Am I adding these rules wrong? What else could I try? Here is a screenshot of my configuration (The block rules are disabled so people can use the internet, but were enabled for my setup) Thank you! -Joel
