DNS Filtering for specific user

[rupadana]

i've been build server for DNS Filtering and i want to forward my openwrt to my DNS server
i'm using the iptables for forwarding the port of DNS

iptables -t nat -A PREROUTING -p udp -s 192.168.1.129 --dport 53 -j DNAT --to-destination xxx.xxx.xx.xx:xxx

and i got DNS_PROBE_FINISHED_NO_INTERNET

[lleachii]

Why are you using the firewall to assign a DNS server?

Just assign the server via DHCP, or on the client statically.

config host
	option ip '192.168.1.129'
	option mac 'xx:xx:xx:xx:xx:xx'
	option name 'pc_dns_filtered'
	option dns '1'
	option tag 'filtered_dns'

config tag 'filtered_dns'
	list dhcp_option '6,8.8.8.8,8.4.4.4'

[trendy]

Also have a look at this: https://openwrt.org/docs/guide-user/firewall/fw3_configurations/forced_dns_redirection

[rupadana]

@lleachii

list dhcp_option '6,8.8.8.8,8.4.4.4'

can i definied port on list dhcp_option?

[trendy]

Not there, but you can define in dnsmasq.

[rupadana]

@trendy

Also have a look at this: https://openwrt.org/docs/guide-user/firewall/fw3_configurations/forced_dns_redirection

i already trying this but still not working

[rupadana]

@trendy

Not there, but you can define in dnsmasq.

when i define in dnsmasq, can i define for spesific user?

[trendy]

Yes, @lleachii explained it here.

[rupadana]

with a spesific port of DNS Server?

[trendy]

As far as I know you cannot push the port of the NS via DHCP.

[eduperez]

My two cents: why don't you keep the OpenWrt router as a DNS, and configure the filtering DNS as an upstream DNS? Seems far easier than this.