local DNS blocked by firewall (bug?)

RouterOS RouterOS beta
1

Chateau C12 LTE, ROS v7.1beta1

I have setup local DNS cache. There is some weird issues with the default rule defconf: drop all not coming from LAN

I see in firewall log


Aug/04/2020 19:56:01 firewall,info DROP !LAN:  input: in:(unknown 1) out:(unknown 0), proto UDP, 192.168.88.1:43119->192.168.88.1:53, len 73

2020-08-04_supout.rif.zip (584 KB)

2

You set router’s own address as dns resolver:

/ip dns
set allow-remote-requests=yes servers=192.168.88.1

Don’t to that and the problem should go away.

3

already configured this way

4

Your router should not be set to use itself as a DNS server. Under IP->DNS, verify that the only DNS server IPs entered are remote ones and not the router itself.

5

thanks for reply. I have followed your manual.

Isn’t it incorrectly written or did I misunderstand, please?

Example: To set 159.148.60.2 as the primary DNS server and allow the router to be used as a DNS server, do the following:

6

What I posted is from your config and it’s what’s wrong, you shouldn’t set any server if you don’t have it. Just let it use dynamic servers that can be seen in your supout.

Edit: Of course if you want, you can set some static public ones like 8.8.8.8.

7

You misunderstood. In the example, “159.148.60.2” would be the DNS server you want to use (ex. that of your ISP) and not the router itself. The “allow-remote-requests=yes” is what allows the router to be used as a DNS server.