DNS Assignment - very strange things

[Preskitt.man]

Have ASUS RT-AX86U Pro running Merlin 3004.388.8_2

I am trying to test out various adblocking DNS services.
I went to WAN DNS services and from the Assign button, tried different sets of servers, including vanilla ones like Google. Always click apply to complete task.
After each and every assignment, I wouild go to dnscheck.tools, and each and every time, it would tell me my DNS was a set of cloudfare servers (172.69.32.xxx). Those ip's aren't even a choice in Merlin.
So, then I went to LAN/LAN-DHCP and manually assigned to my Macbook the preferred DNS server address. Still the same cloudfare servers.

Not trying anything fancy. What am I doing wrong?

 

[dave14305]

The IPs you see on dns leak tests rarely match the (usually) anycast DNS IPs configured on the router.

Post an example of your DNS settings (WAN, LAN, DNS Director) along with a test result.

 

[Preskitt.man]

LAN Setttings
DNS and Win Server Setting:
DNS Server1: 94.140.14.14
DNS Server 2:: 94:140.15.15
Manually Assign IP: Dave's Macbook Air: 94.140.14.14

WAN Settings:
DNS Server: 94.140.14.14; 94.140.15.15

If I do a NSlookup from the ASUS Tool Page:
nslookup yahoo.com
Results;
Server: 94.140.14.14
Address 1: 94.140.14.14 dns.adguard.com
This is good.

But if I do an NSlookup from my MAC (which has an assigned DNS server of 94.140.14.14

Server: 1.1.1.1
Address: 1.1.1.1#53

Nothing (that I am aware - certainly not anything I explicitly did) forces my DNS to 1.1.1.1
However, went to terinal on MAC and

% networksetup -getdnsservers Wi-Fi
1.1.1.1

Ok so now we are getting somewhere - apparently this overrides router settings. So, then entered this command:

networksetup -setdnsserver Wi-Fi. which is supposed to reset to defaults:

And then did another


networksetup -getdnsserver Wi-FI
and still got
1.1.1.1

Very wierd

 

[dave14305]

and still got
1.1.1.1

Very wierd

That’s why DNS Director exists.

 

[Preskitt.man]

ok - think I figured this out. Sometime, beyond my limited memory capacity , I must have set the DNS server entry in the MAC to 1.1.1.1. And proceded to forget about this. This setting apparently overrides any router based settings. I'm generally more of a Windows guy, and default setting on Windows for DNS is 192.168.1.1 - which then passes responsibilty for the DNS to the router.

Thanks all for the assitance.

 

[sfx2000]

Any time you play with DNS - it's always wise to clear out the DNS cache on the clients...

DNS TTL means they will cache until the limit expires...

 

[sfx2000]

And here is a good tool to check current client DNS

dnscheck.tools - check your dns resolvers

A tool to test for DNS leaks, DNSSEC validation, and more

www.dnscheck.tools