Force DoH for all clients

Installing and Using OpenWrt Network and Wireless Configuration
1

Is there any way to force DOH for all devices on my network.
I believe certain devices are hard coded to use their own serverice providers regardless for what is set up on a router, The Pfsnece answer was to redirect port 53 to the 127.0.0.1 and then somehow redirect that to 853 defeating any circumvation, through firewall rules I believe.

I did not bother saving the link to the article as it will be a different interface from theirs if this can be done on OpenWrt.
I currently use cloud9 's 9.9.9.9 and 149.112.112.112 Servers.

Anyone know how to achieve this for a novice like me, Thanks.

2

Install HTTPS-DNS-PROXY this will be configured as upstream DOH servers for DNSMasq there are settings to force DNS53 and DOT (port 853) via the router

1 Like
3
4

Will doing this break anything already set up.
I am currently using quad9 servers.
Also using the onboard WiFi on the Pi4 /OpenWrt instlall to connect to my phones hotspot to provide internet access, this is all working well as of now.

Did I pick this up right, there are extra steps to do in order to have the local DNS queries dealt with on the router instead of using DOH for them too.

5

This blocks outgoing queries from the clients.

6

But if it blocks outgoing DNS queries, how will they reach the internet.

7

Their DNS queries won't, which is the whole point.
The router will do DoH for them.

8

Technically it's not a block but a forceful redirect. Clients outgoing DNS traffic gets intercepted on your OpenWRT Router.

9

For the regular DNS requests.
DoT and DoH needs to be blocked, to force them to use the local DNS.

1 Like