Unbound Force all DNS requests through Unbound using iptables?

[muffintastic]

Hello folks!

I'm looking for correct iptables to allow me to pass all dns queries through Unbound, the goal would be:

1. Encrypt any plain dns.
2. Force hardcoded DNS through Unbound; Smart TVs etc.
3. Deny any DoH / DoT browsers may use.
4. Use Adguard to cease any ads.

My setup at the moment > RT-AX86U Pro (Merlin FW) > Adguard > Unbound (Using DoT, Cloudflare)

In Adguard upstream at the moment is set as '127.0.0.1:53535' at this time everything works, blocking ads as intended.

Anyone with a similar setup able to include this into iptables as requested?

 

[dave14305]

Is DNS Director in Router mode not enough? Why custom rules?

 

[muffintastic]

Is DNS Director in Router mode not enough? Why custom rules?

Yeah, but i was wondering if it was possible. Jeeze, I was only asking a friendly question didn't expect that crude response. Nevermind eh, I guess that's society for you.

 

[dave14305]

My question was intended to determine if the DNS Director method was inadequate with 3 different DNS servers running on the router (dnsmasq, AdGuard Home, Unbound).

Enable DNS Director and examine the rules it creates.

iptables -t nat -S