Force LAN to use router as DNS proxy?

[posix]

Using WNDR4300 router with Genie interface.

Router Firmware Version = V1.0.2.80

I can't find a way to force LAN to use router as DNS proxy.  All methods I have tried either permit LAN devices to manually bypass router DNS proxy, or they block router from doing DNS queries itself.

Any suggestions?

[TheEther]

There's not much you can do.  The router already advertises itself as the DNS server, but it can't prevent a device from sending queries to a different DNS server. You could try blocking port 53 on the router's Block Services page but this may break all DNS.  Even if it works, someone could still bypass it with a tunnel.

[posix]

Thank you for your reply.  That's what I suspected.  I did try blocking the DNS service, but it also blocked the router itself, even through I excluded its LAN IP address from the block (that doesn't make sense to me).  I could live with bypassing via tunnel, but not otherwise.

[TheEther]

You need a device with a firewall that can block DNS packets to any server except the router.