Firewall and dns

Installing and Using OpenWrt Network and Wireless Configuration
1

Hi,
someone could tell me if that rules have sense?
thanks

config redirect 'dns_int'
	option name 'Intercept-DNS'
	option family 'any'
	option proto 'tcp udp'
	option src 'lan'
	option src_dport '53'
	option target 'DNAT'

config redirect
	option dest 'wan'
	option target 'DNAT'
	option name 'dns intercept'
	list proto 'tcp'
	option src 'lan'
	option src_dport '853'

config redirect
	option dest 'lan'
	option target 'DNAT'
	option name 'dns intercept'
	list proto 'tcp'
	option src 'wan'
	option src_dport '443'
	option dest_ip '8.8.8.8'
2

Follow https://openwrt.org/docs/guide-user/firewall/fw3_configurations/intercept_dns instead.

2 Likes
3

Ok so only on port 53, I'm wondering too, if we could intercept port 853

4

You should block it, as described in the link you were given.

2 Likes