VPN Director - stock asus firmware.

[bennor]

Mmmm...no. It was in Asus firmware for a while but was removed. Something to do with the naming/copyright infringement? Guess they just removed it from the gui but left the functionality.

DNSFilter was renamed to DNS Director in the Asus-Merlin firmware:
388.1 (3-Dec-2022) firmware

- CHANGED: Rebranded DNSFilter as DNS Director. This will prevent
confusion with the company sharing the same name, and
also better describes what the feature does.

386.9 (6-Jan-2023) firmware.

- CHANGED: Rebranded DNSFilter as DNS Director. This will prevent
confusion with the company sharing the same name, and
also better describes what the feature does.

DNS Filter in ASUS Merlin (or in ASUS Stock firmware at some time) vs DNSFilter.Com

I am confused between DNS Filter available in ASUS Merlin (or was available in ASUS Stock firmware at some point of time) vs DNSFilter.Com which is a company providing commercial DNS Filtering. When I search for DNS Filter in Google, it mostly takes to the company website. If someone can...

www.snbforums.com

One thing I want to note: I created DNSFilter almost a year before the company of the same name got created...

The stock Asus 3.0.0.6.102_x firmware on my RT-AX86U Pro does not appear to have "DNS Director" (or something like it) in the GUI > LAN section (or at least I do not see it).

 

[dave14305]

OK, in your advanced network mind is there a fix?

Probably, but I’ll need to find a time to flash stock firmware again.

You can try browsing to the DNSFilter.asp page and see if it’s there.

 

[Tech9]

Asus App filtering is using it, but no settings in the WebUI.

 

[bennor]

You can try browsing to the DNSFilter.asp page and see if it’s there.

Not there on the 3.0.0.6.102_34336. Get a file not found. No DNSFilter.asp file found when using WinSCP to search the entire RT-AX86U Pro firmware via SSH.

PS: checking NVRAM.

nvram show | grep dnsfilter
dnsfilter_custom1=8.8.8.8
dnsfilter_custom2=8.8.8.8
dnsfilter_custom3=8.8.8.8
dnsfilter_enable_x=0
dnsfilter_mode=0
rc_support=mssid 2.4G 5G update usbX2 switchctrl manual_stb 11AX pwrctrl WIFI_LOGO nandflash movistarTriple wifi2017 2p5G_LWAN app ofdma wpa3 no_jumbo_frame reboot_schedule ipv6 ipv6pt s46 ocnvc dslite PARENTAL2 dnsfilter dnspriv dualwan pptpd openvpnd utf8_ssid printer modem webdav rrsut cloudsync media appnet timemachine hdspindown diskutility dnssec usb_bk frs_feedback dblog email bwdpi wrs_wbl ookla HTTPS letsencrypt ssh vpnc vpn_fusion vpn_fusion_if repeater psta wl6 user_low_rssi tcode usericon stainfo cloudcheck realip lacp wanbonding alexa ipsec_srv cp_freewifi captivePortal mumimo netool cfg_sync no_finiwl fupgrade afwupg betaupg amas bcmwifi bcmhnd mbo conndiag eula proxysta iperf3 mswan account_binding gameMode wireguard ftp_ssl acl96 dhdlog dis11b mtlancfg smart_connect wpa3-e mtppp
size: 95802 bytes (100806 left)
dnsfilter_rulelist=

 

[Tech9]

It was in Asus firmware for a while but was removed.

DNSfilter 1:1 as it was in Asuswrt-Merlin back then was in 2021 Asuswrt 386 RC3-1 beta, but never made it to official release. The Asuswrt beta files are now removed and DNSfilter was renamed to DNS Director in later Asuswrt-Merlin.

 

[dave14305]

I was able to "fix it" on stock by changing the sdn_rl nvram variable, but I probably wouldn't recommend it since I'm not fully aware of the side effects (if any). The tweak was to change the 9th value in this entry from 0 (no filtering) to 11 (router mode). All the other values can probably ruin your network.

# nvram get sdn_rl
<0>DEFAULT>1>0>0>0>0>0>0>0>0>0>0>0>0>0>0>0>0>WEB>0>0
# nvram set sdn_rl="<0>DEFAULT>1>0>0>0>0>0>11>0>0>0>0>0>0>0>0>0>0>WEB>0>0"
# service restart_dnsfilter
# iptables -t nat -S | grep DNSFILTER
-N DNSFILTER
-A PREROUTING -i br+ -p udp -m udp --dport 53 -j DNSFILTER
-A PREROUTING -i br+ -p tcp -m tcp --dport 53 -j DNSFILTER
-A DNSFILTER -i br0 -j DNAT --to-destination 192.168.1.1
-A DNSFILTER -j DNAT --to-destination 192.168.1.1

asuswrt-merlin.ng/release/src/router/shared/mtlan_utils.c at b5fb23a4be5c87df4c345551461de39455e58bfa · RMerl/asuswrt-merlin.ng

Third party firmware for Asus routers (newer codebase) - RMerl/asuswrt-merlin.ng

github.com

You can then run the get_mtlan command to see the dnsf_idx value change to 11.