DNS over TLS/HTTPS

[HomeSafeEU]

Hey.

I hope someone can help me with DNS over TLS. I should immediately think that I have set it correctly, but when I test it, it doesn't seem to work. Can you see any errors in my setup or is there anything else I need to do?
Thanks in advance.

I have uploade some attached files to this post - images of the settings.

 

[dave14305]

Hey.

I hope someone can help me with DNS over TLS. I should immediately think that I have set it correctly, but when I test it, it doesn't seem to work. Can you see any errors in my setup or is there anything else I need to do?
Thanks in advance.

I have uploade some attached files to this post - images of the settings.

I also posted elsewhere a minute ago that the Cloudflare test is faulty when DNSSEC is enabled. Been an issue on their side for a while now.

 

[Snoopotic]

Hi.
I‘d also remove the entries in WAN-DNS to make sure you only use the doT servers.

On
https://github.com/RMerl/asuswrt-merlin/wiki/DNS-Privacy
There‘s also a test described via tcpdump you may use.

Glood luck.

 

[SomeWhereOverTheRainBow]

Hi.
I‘d also remove the entries in WAN-DNS to make sure you only use the doT servers.

On
https://github.com/RMerl/asuswrt-merlin/wiki/DNS-Privacy
There‘s also a test described via tcpdump you may use.

Glood luck.

A wan dns should be filled in or set auto for router based interactions.( local traffic done by the router). The only reason why is because the routers current default makes all local traffic done by the router gets done by wan dns 1 and 2. Only client traffic goes through stubby(dot).
This is what I am referring to when I say the routers local traffic

 

[Snoopotic]

A wan dns should be filled in or set auto for router based interactions.( local traffic done by the router).
View attachment 19390

Thanks. Did not know that. Yeah I recognized that As I live with unset wan dns so far... I found out I set some in the ipv6 settings and it seems they are used in my dual-stack environment and thus I don‘t have any issues.

 

[DonnyJohnny]

Hey.

I hope someone can help me with DNS over TLS. I should immediately think that I have set it correctly, but when I test it, it doesn't seem to work. Can you see any errors in my setup or is there anything else I need to do?
Thanks in advance.

I have uploade some attached files to this post - images of the settings.

lol.. your setting is wrong for DoT in Merlin.
You should not use manual assign dns IP. Use automatically.

And yes there is some dnssec issue with cloudflare if dnssec validation is enabled in router. If u still want dnssec, you can use dnssec-proxy instead.

 

[dave14305]

lol.. your setting is wrong for DoT in Merlin.
You should not use manual assign dns IP. Use automatically

This isn’t necessary or wrong.

 

[HomeSafeEU]

I also posted elsewhere a minute ago that the Cloudflare test is faulty when DNSSEC is enabled. Been an issue on their side for a while now.

Hi

Thanks for that advice. After I turned off DNSSEC it worked fine. I hope Cloudflare solves the problem.

 

[HomeSafeEU]

A wan dns should be filled in or set auto for router based interactions.( local traffic done by the router). The only reason why is because the routers current default makes all local traffic done by the router gets done by wan dns 1 and 2. Only client traffic goes through stubby(dot).
This is what I am referring to when I say the routers local traffic
View attachment 19390

So my settings are correct as they are now? I use "Connect to DNS Server automatically" set as "no".

 

[dave14305]

Hi

Thanks for that advice. After I turned off DNSSEC it worked fine. I hope Cloudflare solves the problem.

In case it's not clear, you can still enable DNSSEC and DoT together. Their website test just won't work, but DNSSEC will still work over the DoT connection.