I'm using a D-LINK DLS 2750 U, and have set DNS on the router. How do I enforce all clients to use this DNS?
-
With consumer-grade routers, you simply cannot.– Daniel BApr 2, 2018 at 13:12
-
complete enforcement is not possible without also restricting a lot of other stuff, vpn is probably easiest way around that even if u're inspecting actual packets.– Sampo Sarrala - codidact.orgApr 2, 2018 at 15:11
2 Answers
DNS settings on the client will override the DNS on the router - this was by design on consumer-grade routers. If the hosts are all Windows Operating Systems, enforce DNS via Group Policy.
You can restrict clients to use your DNS server by closing outgoing traffic to port 53
(TCP and UDP) with firewall. In this case clients will be unable to use external DNS servers listening on the standard DNS port.
However, they will be able to use DNS servers that use ports other than 53.