Block DoH and DoT dns on Android using banip

Installing and Using OpenWrt
21

banIP already includes a blocklist for DoH (also referenced in @trendy post) ... you should start with it and not use an outdated ip list from 2020/2021.

2 Likes
22

they use other toop ipset something ... and i assume you are referring to the the list
"https://raw.githubusercontent.com/dibdot/DoH-IP-blocklists/master/doh-domains.txt"

i assume the easiest way would be hairpining which i am not able to setup correctly...

23

Nothing you've posted so far, actually proves it isn't working...

24

hello,
so i bought new phone samsung s22; and same issue as on old s10... i cant resolve these hosts... all works fine on iphone... just samsung doesnt work.

any idea? i am seriously desperate. :frowning:

someone discussed it here ... again without solution....
https://forum.openwrt.org/t/force-android-phone-to-use-local-dns-for-local-domain-name-resolving

25

nothing have changed, except for your client device.

26

Have you disabled the 'Private DNS' setting on your phone?

27

@krazeh sure, nothing happened.

28

@frollic so i dont get it ... what do u mean?
there are other threads regarding the same issue ... i cant find any thread with a working solution ...

29

You also haven't posted any configuration files from what you have tried so far to help you any further.

1 Like
30

If you use an app like Net Analyzer what does it show the DNS server on your phone is set to?

31

i think thats tcpdump

32

It'd really help if you answered the question that was asked...

33

@krazeh oh my fault ... yeah i am going to install it and provide results. thanks and sorry.

34

@krazeh
in dns section it shows>
Default gw ipv6 n/a
dns server ipv6 fddc:69d5:f391::1

is it possible to Disable ipv6 dns server? I dont know why ipv6... as i use ipv4 and also device has ipv4 address and ipv6 (no clue why ipv6...)
fe80::3fc1:....
fddc:69d5:....
fddc:69d5:...

thanks!

35

Could you just answer the question that was asked? What DNS server IP is your phone reporting it's using?

36

@krazeh
dns server ipv6 fddc:69d5:f391::1

  • thats directly from the app u recco.

Inside that app if i go to tools section and using Query / DNS
and when i provide the xxx.duckdns.org ; settings Any; Dns server: 10.0.1.1 (my openwrt)
it resolves the domain xxx.duckdns.org correctly

The problem here is apparently that phone is not using my dns server 10.0.1.1

37

So you're not using IPv4? Despite the various tcpdumps you've posted showing IPv4 addresses?!?

38

I am using IPV4 ; device has ip addres 10.0.1.xxx

i have no clue why DNS is set to ipv6?

39

So what does the app say is the 'DNS Server IP'? Ignore the IPv6 stuff.

40

here is a screenshot ... https://imgur.com/a/OKWMNUJ