Family network OpenDNS strategy - any ideas?

RouterOS General
1

Hi,

I have setup some address lists - regular vs family. I have setup rules rules to send family to open dns and regular to google.

The issue is I have to manually add “family” users. This is a PITA.

I have also setup some a Family wirelss vlan that uses OpenDNS - but the VLAN prohibits other things like - printing, Sonos, Airpaly, etc…

Does anyone have a strategy or process of to send family (primarily wireless) hosts to OpenDNS and yet retain access to the local/regular network assets?

I am looking for a magic bullet here I think…

Thanks in advance.

2

Set OpenDNS IPs in IP → DNS servers

Use a dstnat chain rule, protocol udp, dst port 53, with action redirect

This grabs all dns traffic and forces it via the mikrotik, then you can still use static entries for local machines

Use an address list to bypass the redirect, for unfiltered machines, you can populate this by adding the address list on static dhcp leases.

Nick

3

try static DNS override to overlap/gap some of openDNS resources to you Private resources.
similarly - you can blackhole unsolicited advertisements by DNS. - write script that download host file from lowe website, parse it, import it and write as localhost override. no pesky advertisements Anymore !! same about malware(just add malware and malvertisement host file subscriptions too. you can download them manually or simply export from things like ublock(“3rd-party” subscriptions can come handy sometimes :wink: