1

I'm using a D-LINK DLS 2750 U, and have set DNS on the router. How do I enforce all clients to use this DNS?

2
  • With consumer-grade routers, you simply cannot. – Daniel B Apr 2 '18 at 13:12
  • complete enforcement is not possible without also restricting a lot of other stuff, vpn is probably easiest way around that even if u're inspecting actual packets. – Sampo Sarrala - codidact.org Apr 2 '18 at 15:11
2

DNS settings on the client will override the DNS on the router - this was by design on consumer-grade routers. If the hosts are all Windows Operating Systems, enforce DNS via Group Policy.

3
  • is there an option on the router to do it because i can't access to all the devices – M.A.Bell Apr 2 '18 at 13:21
  • 2
    @M.A.Bell - A router cannot override the configuration of a client device. – Ramhound Apr 2 '18 at 13:27
  • ah ok I 'll search another solution – M.A.Bell Apr 2 '18 at 13:29
1

You can restrict clients to use your DNS server by closing outgoing traffic to port 53 (TCP and UDP) with firewall. In this case clients will be unable to use external DNS servers listening on the standard DNS port.

However, they will be able to use DNS servers that use ports other than 53.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.