MikroTik RB2011UAS-2HnD - setup

bicker · April 16, 2015, 8:27am

Hy there,

i start using MikroTik Routers to give internet to my LAN computers. My internet provider gives me Static IP Address, Gateway Address and two DNS Addresses. I start configuring the router using Quick Set Wizard and putting some firewall rules. My Internet Provider ask me to not resolver DNS request from outside LAN (WAN). I don’t know what to do. I found in IP - DNS something like “Allow Remote Requests”, but if i uncheck the box, internet is no longer working for LAN computers. How do i resolver the problem : " do not resolver DNS request from WAN".

Thanks,

jarda · April 16, 2015, 2:03pm

Search the forum. It is written hundred times here around. You need to block udp and tcp port 53 in input chain from wan interface.

freemannnn · April 16, 2015, 2:21pm

/ip firewall filter
add chain=input in-interface=pppoe-out1 protocol=udp dst-port=53 action=drop
add chain=input in-interface=pppoe-out1 protocol=tcp dst-port=53 action=drop

jarda · April 16, 2015, 5:55pm

How this interface is relevant to bicker’s situation?