I have been using my mikrotik with DoH since last year without any issues. So, I recently bought a raspberry pi for the purpose of blocking ads. My previous attempt of blocking ads with scripts in mikrotik doesn’t go well. Though, pi hole itself has its own issue, but the main thing is that its reli…

You can’t use a Mikrotik device as a DoH server, only a client. Here are some good things you can do to make a better DNS setup: → Set up a Netwatch to disable the redirect when the PiHole goes down. → Exclude the PiHole’s address from the DNS redirect. → Set up a backup PiHole that gets used…

Yes, as a Doh client, following this post http://forum.mikrotik.com/t/doh-server-connect-error-network-is-unreachable/141603/10 Netwatch will solve the dns reliability problem. Currently getting a second pihole is not an option. I will be okay without the 2nd pihole. But , how do I route the dns tra…

Figured it out using /ip dhcp-server network add address=192.168.88.0/24 dns-server=192.168.88.5 gateway=192.168.88.1 netmask=24 add address=192.168.88.5/32 dns-server=192.168.88.1 gateway=192.168.88.1 netmask=24 Solution by @vecernik87 http://forum.mikrotik.com/t/alternate-dns-for-specific-ip-on…

It is better to have your PiHole on a different subnet, this way you can use dst-nat to do the fail over. You will not have to wait for your dhcp-lease on each device to renew before the fail over works. /ip route add dst-address=192.168.188.2 gateway=bridge /ip dhcp-server network add address=192…

Thank you for the reply. I have too many containers in my raspberry with their own static IP using macvlan, So, excluded the different subnet. So, I had this dhcp-server network setup with the nat rule you provided: /ip dhcp-server network add address=192.168.88.0/24 dns-server=192.168.88.5 gateway…

I have somehow managed to complete the script. There is only a single issue that is “dhcp changed by” entries in logs. There are two variants, though they are both the same and do the same things. Script 1 :local gateway "192.168.88.1" :local currentDNS [/ip dhcp-server network get [find comment=…

The reason the NAT rules do not work when in the same subnet, is because the clients communicate directly with one another. For the router to do the NAT, that traffic has to passthrough it’s CPU. This does not happen even when clients are connected to the router, but on bridged interfaces. If this w…

Thank you for clarifying, this router is the only one I have and it seems like creating a new subnet for raspberry is the better choice. Which will take me a day or two to report back. Though, the script I made worked as intended but at the end its breaks the DoH. But, will you please do the honor o…

I think I understand better why the flow looks like there is a loop. You want the MikroTik to use DoH right? You could add DoH to pihole. But yea out the box newer versions of MikroTik support it directly. I think pihole is still in development for DoH. So it’s a littler easier to use MikroTik …

Nat rule didn’t work, probably the best route is to use a different subnet. Pihole kinda buggy by it self and I am using it in a docker, which makes it even buggier. Also, most official developer doesn’t release an arm version of containers. Most containers for arm mostly developed by developers wit…

Mikrotik,pihole & unbound.

RouterOS General

shafiqrahman May 20, 2021, 1:12am 18

@2frogs Post #5 solves the issue, but the fallback script doesn’t work.

[Script] Automatically change DNS if Pi-hole is no longer working

Redirect outgoing DNS requets to internal DNS server

Find specific NAT rule