Bypassing DNS-based censorship

RouterOS General
1

I’m trying to set up my hEx S router such that it bypasses censorship in my country when resolving certain addresses. When I configure my ethernet connection to be static and resolve DNS queries directly to 8.8.8.8, none of the addresses resolved are censored. However, when I connect via DHCP, some addresses are resolved by state-run DNS servers.

What I’ve done:

  • Disabled “use peer DNS” in IP → DHCP client
  • Added 8.8.8.8 and 8.8.4.4 in IP → DNS → servers (two separate entries)

Clearly I’m missing some additional setting somewhere. How do I make it so DNS resolutions bypass state-run servers?

Output from systemd-resolved --status (on my Linux system):

Global
       LLMNR setting: no
MulticastDNS setting: no
  DNSOverTLS setting: no
      DNSSEC setting: no
    DNSSEC supported: no

Link 2 (eno1)
      Current Scopes: DNS          
DefaultRoute setting: yes          
       LLMNR setting: yes          
MulticastDNS setting: no           
  DNSOverTLS setting: no           
      DNSSEC setting: no           
    DNSSEC supported: no           
  Current DNS Server: 192.168.1.2  
         DNS Servers: 192.168.1.2  
                      8.8.8.8      
                      8.8.4.4