0

Router OS v6.35.4

I ticked the option IP > DNS > Allow remote requests because I want to use router's static DNS list.

Using firewall rules I drop all the traffic to dst 53 port of UDP and TCP for input and forward chains allowing only UDP requests from local subnet to my router through input chain.

When I look to IP > Firewall > Connections tab I see sometimes connections from some external IP address to some other external IP address to port 53. Both external IP addresses are not mine. The status of those connections is seen reply + confirmed where normal external requests are typically seen reply + assured + confirmed.

Counter for the blocking rules remains by 0. Rules are moved to the top.

The only way to stop strange connections is to untick the IP > DNS > Allow remote requests option.

How to explain this?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.