DNS Configuration question

[Joboo7777]

Hey guys,

I have an RT-AC3100 running 382.1_2 with DNS Filtering set to use OpenDNS. I also have a VPN Client configured to use "Exclusive" DNS with select Default routes for some of my devices to go through the VPN. In order to ensure clients going through VPN tunnel use the VPN DNS servers I need to add a "No Filter" entry in the DNSfilter section Otherwise it will use the OpenDNS servers.

Is this normal behavior? Since Exclusive DNS is set on the tunnel, I expected clients going through the VPN tunnel to use the VPN DNS servers regardless of DNS Filter configuration.

Thanks

 

[RMerlin]

This is because both DNSFilter and Policy Rules use the same method to redirect DNS queries - it becomes a matter of rule order to determine which redirection has priority over which. Currently, DNSFilter rules are processed first. I'll take a look to see if it would be possible to give a higher priority to DNSVPN rules before DNSFilter.

 

[RMerlin]

Should be fixed with https://github.com/RMerl/asuswrt-merlin.382/commit/e9b1c21173903bb56a64e581b3f4eb1f96a9558b . DNSVPN rules are now inserted at the top of the PREROUTING chain, while DNSFILTER will be somewhere below that.

 

[Joboo7777]

Should be fixed with https://github.com/RMerl/asuswrt-merlin.382/commit/e9b1c21173903bb56a64e581b3f4eb1f96a9558b . DNSVPN rules are now inserted at the top of the PREROUTING chain, while DNSFILTER will be somewhere below that.

Thanks Merlin! Much appreciated