How to Force DNS connections in home network

I do not want people in my network changing their dns for personal reasons , how
can I prevent this , I found this rule on internet but it seems a bit risky to port forward on wan

config redirect
        option dest 'lan'
        option target 'DNAT'
        option name 'Force DNS'
        option src 'lan'
        option src_dport '53'

The rule you've got there won't do anything... but the idea makes sense. What you want is called DNS hijacking.

2 Likes