OpenVPN Client & AI Protection - DNS Filtering

[Aaron Payne]

I am hoping someone can help. My usecase is simple. I want to tunnel all traffic via the my configured VPN client (configured & working) but retain the DNS filter controls. When I enable the VPN it breaks the AI Protection DNS Filtering rules. I assume this is because the VPN client pushes out new DNS server addresses.

Anyone know how I can accomplish this? I guess I need the router to hour the AI Protection DNS Address and ignore the ones being sent back to the VPN client.

 

[fryedchikin]

Set the Accept DNS Configuration to Disabled in the VPN client settings.

 

[Aaron Payne]

Set the Accept DNS Configuration to Disabled in the VPN client settings.

Thanks for your reply but this had no affect.

Under LAN Settings --> DHCP Server --> DNS Server 1 = 8.8.8.8
Advertise Routers IP in addition to specified DNS = NO
Forward local domain queries to upstream DNS = NO

AI Protection --> DNS Filtering
Enable DNS Filtering = ON
Global Filter Mode = "No Filtering"
Then I have a list of specific clients e.g

KidsMac Filter Mode = "Norton Children"
KidsiPad Filter Mode = "Norton Children"
​

OpenVPN Clients
Accept DNS Configuration = Disabled

If I turn the VPN client Off all filtering works correctly. If I turn the VPN client on filtering does not work, adult website material is accessible from "KidsMac"

Is this a bug or have I missed something?

​

 

[Aaron Payne]

Thanks for your reply but this had no affect.

Under LAN Settings --> DHCP Server --> DNS Server 1 = 8.8.8.8
Advertise Routers IP in addition to specified DNS = NO
Forward local domain queries to upstream DNS = NO

AI Protection --> DNS Filtering
Enable DNS Filtering = ON
Global Filter Mode = "No Filtering"
Then I have a list of specific clients e.g

KidsMac Filter Mode = "Norton Children"
KidsiPad Filter Mode = "Norton Children"
​

OpenVPN Clients
Accept DNS Configuration = Disabled

If I turn the VPN client Off all filtering works correctly. If I turn the VPN client on filtering does not work, adult website material is accessible from "KidsMac"

Is this a bug or have I missed something?

​

One additional configuration parameter.

WAN --> WAN DNS Setting --> Connect to DNS Server Automatically = NO
DNS Server 1 = 8.8.8.8

Its seems like the firmware (378.56_2) has a bug where it ignores all local DNS Settings if the VPN client is enabled.

 

[Aaron Payne]

One other thought. Maybe AIProtection - DNS Filtering is ignored if a VPNClient is configured.

Can anyone help?

 

[fryedchikin]

My setup is similar to yours and DNS filtering is working just fine when VPNClient is connected. Can you goto https://ipleak.net/ and see what DNS servers are being detected.

 

[Aaron Payne]

Here is the ilpleak data you requested. over VPN it doesn't seem to show any DNS servers.

 

[Aaron Payne]

Is anyone able to help?