Can you confirm udpxy works properly once started manually?
udpxy works fine when starts manually. Movistar iptv profile is new in AC86U, recently added in the 384_45713... I think they have simply forgotten. Thanks
Can you confirm udpxy works properly once started manually?
The redirection is done at the firewall level, so there's a good chance your application does not properly detect this. Only way to be sure is to test using tcpdump on the router - the only outbound 123 traffic should be coming from the router itself, to the servers configured on the System page.
Asuswrt-Merlin 384.11 Beta is now available for all supported models. This release features a number of significant changes.
Check out DNSFilter page.Would it possible to have an option to force LAN client DNS queries over DNS-over-TLS? I realize this is basically a port 53 firewall rule, but a GUI option would be great.
Check out DNSFilter page.
@Jake, to be more specific, enable DNSFilter and set the Global option to Router. This is mentioned in the first post of this thread.
That works, thanks! I was not aware that option in the UI. Would you agree the DNSFilter page could be eliminated on this release, as it could be incorporated into WAN>Internet Connection page with a "Force DNS Queries over DNS-over-TLS" option?
Edit: That would loose the option to configure specific clients for DNS redirection, however. It also seems the the first 3 or 4 options under WAN>Internet Connection>WAN DNS Setting should be disabled if one is using the DNS-over-TLS option (less confusing)?
@RMerlin
Thank you very much for the firmware and DOT.
CleanBrowsing DNS is incorrect in two options.
CleanBrowsing Family 2 and CleanBrowsing Adult 2.
https://cleanbrowsing.org/guides/dnsovertls
Thanks.
Just to say thank you for 384.11b2 installed and running fine on AX & AC88U and along with various scripts as per my signature.
Running flawlessly with both VPN server & clients.
Kept JackYaz ntpd to impose the ntpsync on all clients.
Great firmware that gives a great use and learn experience of these routers.
Thanks !While I too prefer Jack Yaz's ntpMerlin script, note that the RMerlin 384.11 Beta 2 also (optionally) redirects clients to use its built-in NTP implementation too.
...
With DDNS over TLS added recently as well, I am super happy. I am hoping NTP-over-TLS, which I believe would be the last significant unencrypted router service, will be an option to implement in the future.
...
Regards, Jake
That works, thanks! I was not aware that option in the UI. Would you agree the DNSFilter page could be eliminated on this release, as it could be incorporated into WAN>Internet Connection page with a "Force DNS Queries over DNS-over-TLS" option?
Edit: That would loose the option to configure specific clients for DNS redirection, however. It also seems the the first 3 or 4 options under WAN>Internet Connection>WAN DNS Setting should be disabled if one is using the DNS-over-TLS option (less confusing)?
Hi,
I have installed 384.11_beta2 on my RT-AX88U
I also use ProtonVPN. The server I use I can watch US Netflix from Australia.
I have also enabled DoT
On ipleak.net there shows 2 DNS addresses (1 is ProtonVPN and the other the DoT from the router's selection) and I can watch US Netflix on my Apple TV 4K from Australia perfectly ok.
https://i.imgur.com/NNhjw50.png
However, for the DoT I've selected "CleanBrowsing (1) Security" and since I have 2 DNS addresses will the security feature of the DoT server I've selected work, or are the DNS quires past through the VPN's DNS?
I hope that makes sense.
Is there a easy way to test and verify whether DNS over TLS is working?
tcpdump -ni eth0 -p port 53 or port 853
when VPN DNS is set to Relaxed
What value would this provide? Is there really information about a device or user that can be gained from an NTP query?
Welcome To SNBForums
SNBForums is a community for anyone who wants to learn about or discuss the latest in wireless routers, network storage and the ins and outs of building and maintaining a small network.
If you'd like to post a question, simply register and have at it!
While you're at it, please check out SmallNetBuilder for product reviews and our famous Router Charts, Ranker and plenty more!