Can the Huawei HG659b force users through its DNS?

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › Can the Huawei HG659b force users through its DNS?

Pnut

4 posts

Wannabe Geek

#173268 17-May-2015 18:49

Hi All, long time reader first time poster :)

I have recently upgraded from ADSL to VDSL. On the ADSL i was using an Asus DSL-N11U which allowed me to set it so all the users were forced to use the DNS servers specified by the modem/router. Basically it would either divert them to the OpenDNS or block the request totally. Now i have VDSL using the Huawei HG5659b, does anyone know if it is possible to make the same setting, and if so how?

I have changed the default DNS in the HG659b to point to OpenDNS and that works fine, but if the device is set to say the google DNS servers it over rides the router. I have been searching on here for a while reading up on it and tried a few things but nothing has worked so far.

shk292

2853 posts

Uber Geek

Lifetime subscriber

#1306752 17-May-2015 19:19

You can block the google dns ip addresses by adding a url filter under 'parental controls'

Pnut

4 posts

Wannabe Geek

#1306755 17-May-2015 19:22

Thanks for the reply.

I really want to block all other dns requests if i can, or redirect all to the router DNS. I dont really want to have to maintain an endless list of dns servers if i can help it.

michaelmurfy

meow
13242 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#1306756 17-May-2015 19:22

Pnut: Thanks for the reply.

I really want to block all other dns requests if i can, or redirect all to the router DNS. I dont really want to have to maintain an endless list of dns servers if i can help it.

I don't believe you can on this router.

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

Aredwood

3885 posts

Uber Geek

#1306901 18-May-2015 01:21

Surely you can just add a couple of firewall rules. An "allow rule" for your ISPs DNS servers or Open DNS. Then a "deny" rule for any other DNS servers. DNS uses port 53 UDP.

Also if you are going to use Open DNS. It will probably break NZ streaming sites. And make Youtube really slow / buffer all the time. But you might get access to US netflix without needing a global mode type service.

Pnut

4 posts

Wannabe Geek

#1306959 18-May-2015 09:50

Aredwood: Surely you can just add a couple of firewall rules. An "allow rule" for your ISPs DNS servers or Open DNS. Then a "deny" rule for any other DNS servers. DNS uses port 53 UDP.

Also if you are going to use Open DNS. It will probably break NZ streaming sites. And make Youtube really slow / buffer all the time. But you might get access to US netflix without needing a global mode type service.

I will have a look tonight, but i am pretty sure it is limited on firewall rules.

As for streaming its the other way round, streams NZ sites and youtube fine (though yes a little slower, but acceptable), but cant access US sites unless using unblockus.

richms

28172 posts

Uber Geek

Trusted

Lifetime subscriber

#1307248 18-May-2015 14:58

Aredwood: Surely you can just add a couple of firewall rules. An "allow rule" for your ISPs DNS servers or Open DNS. Then a "deny" rule for any other DNS servers. DNS uses port 53 UDP.

Also if you are going to use Open DNS. It will probably break NZ streaming sites. And make Youtube really slow / buffer all the time. But you might get access to US netflix without needing a global mode type service.

No, wont get you US netflix as they will not be redirecting to a proxy for the requests.

And shouldnt break the local streaming unless they are being really dumb, but they are local broadcasters so that is highly likly.

Richard rich.ms

insane

3239 posts

Uber Geek

ID Verified

Trusted

#1307254 18-May-2015 15:04

If it's running IPtables under the hood then this could work:

iptables -I PREROUTING -t nat -p udp --dport 53 -j DNAT --to-destination 192.168.1.1

Where 192.168.1.1 is the routers IP



- Normal caveats around not using your ISPs preferred DNS applies.