Hello, first of all… excuse my bad english. I will try to make myself as clear and understandable as I can.
I have a Mikrotik with RouterOS version 6.41.2.
Its been in use for a couple of years now and Im really satisfied with it. Never been rebooted except from when the electric goes off in the house. Really stable!
Yesterday I tried to make a “local DNS” for my home network. I do not know if my terms are right as Im not a network guru. .
What I mean is that I want my network adresses for my devices to be static using dhcp server on the mikrotik and binding MAC adresses to specific IP’s.
Also I want for example “mikrotik.local” & “server1.local” refer to “192.168.1.1” & “192.168.1.100”
I accomplished to get static IP’s refered to my MAC adresses.
I also accomlished to get “local DNS” (server1.local) to work… but if I have made it the right way, I dont know! What I did was go to (in the routeros administration page)…
“IP” → “DNS” → “STATIC” → “ADD NEW”…
Then in those fields I typed Name → “server1.local” and Adress → “192.168.1.100”
Also, (I dont know if this was ticked before but I Think so?) in DNS i ticked the “Allow remote requests” (this is why I need help with my firewall rules as I have read that I need to somehow set this up). Thing is, I MUST have the “Allow remote requests” ticked, orelse my internet do not work at home. Is this normal?
And last thing I did, I think… was to add “192.168.1.1” as dynamic server in the DNS section. (I already had two dynamic servers here before).
NOW, everything works as I want. But…
Have I done this the right way?
“Allow remote requests”… how do I setup my firewall for this correctly?
My router version is 6.41.2, should I update this to 6.43.8? I actually thought it was updating automaticly… How do I update?
Is there anything else I need to do?
Please explain as simple as possible… I have never used script or terminal in routeros if i need to do this.
I’m with @anav: upgrade to 6.42.11 (latest long-term currently) or 6.43.8 (latest stable)
Thats about right.
Probably you’ll have to add some rules which restrict connections to router itself (show exported setup so we can comment on which rules need to be added). If you started with default setup of recent ROS versions, you’d already be fine.
That’s normal … “remote” here means “any device which is not this router” … so either LAN or internet hosts qualify.
Don’t … list of DNS servers in DNS section is used by DNS server itself to forward requests if router doesn’t know the answer (either statically set as you did or cached from previous requests). Router should not query itself, it’ll enter infinite loop.
The place where you should add router’s IP address, is at IP > DHCP SERVER → NETWORK … so that it’ll get used by LAN hosts which get their IP config from DHCP server running on your RB. And it should be the only IP address of DNS server configured there. Verify on some client machine that it really contains only this address … I seem to remember that DHCP client (run on router) might push dynamic DNS servers to the DHCP server config as well.
Very strange config for me to try and decipher.
First you have no forward firewall filter rules???
Then you have ether1 which seems to a LAN port but then it seems to be a WAN port
Its not clear if your wan port is also your lAN DHCP server etc… totally frigged up.
Also you have not explicitly stated which DNS servers you want your network to be using??
a. the ISP DNS servers (dynamic)
b. outside DNS servers such as google and opendns
This is how it looks in the gui:
Ether1 should be a LAN port. Why does it seems to be a WAN port?
My fiber modem goes to ether24, and my wireless AP to ether23. Everything else should go to all my Ethernet ports in my rooms…
There are two ways i believe you can setup your DNS.
In IP > DHCP Server > Networks – DNS Servers
If you set the DNS to your local IP such as 192.168.1.1, then you would need to enable “Allow Remote requests” because you’re router will now need to act as a DNS server. Hence it’s also required that your router will be able to communicate to DNS server outside (internet). You will need to setup your inbound firewall so that no outside connection can use your router as DNS server. You will also need to allow outbound request going out on UDP 53 so that your router will be able to communicate to any DNS server to your liking.
If you set DNS servers to IP like 8.8.8.8 then you do not need to enable “Allow Remote Requests”. Because your clients will use this IP outside directly, hence is not required
.
What I did was go to (in the routeros administration page)…
