DNS filtering when using cloudflare DNS?

[razoen]

Hi folks,

I'm using cloudflare's DNS (1.1.1.2/1.0.0.2) and trying to block some domains in my network, but it doesn't work no matter I try:

1. Adding domains to Diversion's Blacklist location
2. Adding `iptables -I FORWARD -d foo.com -j REJECT` to `/jffs/scripts/firewall-start` as suggested in https://www.snbforums.com/threads/block-domains-whats-the-best-way-to-do-this.65528/
3. Adding `address=/foo.com/bar.com/127.0.0.1` to `/jffs/configs/dnsmasq.conf.add` as suggested in https://github.com/RMerl/asuswrt-merlin.ng/wiki/Custom-domains-with-dnsmasq

Is there a way to block these domains while using a DNS server?

 

[ColinTaylor]

Is there a way to block these domains while using a DNS server?

You're always using a DNS server of some sort otherwise you wouldn't have a working internet.

What DNS related changes have you made to the routers default settings? Give an example of a specific domain that you're trying to block.

 

[bbunge]

If you use OpenDNS you can block certain domains as well as filter DNS. Requires an account which is free

 

[RMinNJ]

Found nextDNS easy and fast.

 

[dave14305]

I'm using cloudflare's DNS (1.1.1.2/1.0.0.2)

Where did you configure these? On the LAN page or WAN page? It should be the WAN page only, then Diversion blocking would work because the clients will forward queries to the router, then Diversion will block some of them, and dnsmasq will forward the rest to Cloudflare via the WAN settings.

 

[fotingo]

I've noticed OpenDns is not part of the DNS server list anymore. Is there a reason for that?
I know I can manually add the IP, but just wondering why they got removed.

 

[Crimliar]

Just to clarify! When you say you are using a DNS server, do you mean you are using a DNS server on a device other than the router? If that were the case then you'd be bypassing Diversion!
*It's Sunday morning and I had a little drink last night, so forgive me!