Firewall rule allowing router to send DNS requests

RouterOS Beginner Basics
1

Hi there .

I have a strange problem, the router can t make dns requests for checking the latest’s updates.

On LAN everything works good .

On router ping works only on IP’s , can t resolve dns names.

I tried to add a new rule for allowing the router to make dns requests but no luck. If i m droping the last firewall rule dns requests are working. Where i m doing it wrong?

Thank you

add action=accept chain=input comment="ACCEPT ESTABLISHED AND RELATED" connection-state=
established,related src-address-list=bridge
add action=accept chain=input comment="ACCEPT 30 ICMP PER SECOND" limit=30,5:packet protocol=icmp
add action=accept chain=input comment="ACCEPT DNS REQUESTS FROM LAN" dst-port=53 protocol=udp
src-address=192.168.1.0/24 src-address-list=bridge
add action=accept chain=input comment="Allow router to send UDP DNS requests"
dst-port=53 log=yes protocol=udp src-address-list=bridge
add action=accept chain=input comment="Allow router to send TCP DNS requests"
dst-port=53 log=yes protocol=tcp src-address-list=bridge
add action=drop chain=input comment="DEFAULT DROP" log-prefix=
"dstnat: in:eth2 WAN MAIN out:(unknown 0), connection-state, proto TCP (SYN)"

2

If I understand you correctly, you speak about the MT router itself? If yes, you steer the beaviour in the output-chain. But normally you do not restrict the router itself, only a few corner-cases demand this.

3

Remove src-address-list=bridge from this rule.

4

Thank you, it did the job. Always something new to learn.