VPN connection with OpenDNS

RouterOS Beginner Basics
1

Hi,
Firstly - I am not a network folk so have mercy.

I succeed to configure OpenDNS for my home network with this set:

/ip dns
set allow-remote-requests=yes servers=208.67.222.222,208.67.220.220
/ip firewall nat
add action=redirect chain=dstnat dst-address-type=!local dst-port=53 \
protocol=udp to-addresses=0.0.0.0 to-ports=53 ac

and the additional change in the ppp/pprofile

set *FFFFFFFE dns-server=192.168.88.1 local-address=192.168.89.1 remote-address=vpn

Problem: when connecting remotely with my mobile via VPN to the router, the connection is being established (I can see in the logs and I see home network devices, I can use my printer). But I can not see Internet via VPN.
Any ideas?

2

That has nothing to do with the opendns…

Your mobile has to be configured to forward all your traffic through VPN in order to have internet through your VPN…

Look for an option “use as default gateway” or something in the VPN config in your mobile…

3

my mobile perfectly see Internet via VPN without OpenDNS…

4

Your mobile should NOT see internet through VPN if you not configure it that way…
It is not something that happens by default…
So how exactly your phone routes all traffic through VPN if you have not configured it to do it?

Opendns is just a dns server… it will work with VPN, without VPN, and do what it is designed to do…

5

on the Android there is Config/Networks /VPN. One can provide name, type, server, encryption. Mikrotik allow to connect via VPN. So on the mobile I just provide VPN required info, uname/login and run. I am connected to my router, can print on my home printer…But also I can see Internet, filtered by my firewall. Until I switch to OpenDNS…
Configuring OpenDNS must have change the configuration so VPN incoming connection can not see the Internet. If I restore previous configuration on Mikrotik my phone can see Internet. I change nothing on my phone, only on Mikrotik. But the phone is affected.

6

It can be that requests to 192.168.88.1:53 are blocked from VPN. This placed at the right place (before rule that currently blocks it) should fix it:

/ip firewall filter
add action=accept chain=input dst-port=53 in-interface=all-ppp protocol=udp
7

The fact that you can print at your home printer doesnt mean that your internet traffic is routed through your VPN…

If you dont provide info on how you route your traffic through your VPN then i still dont see any problems with opendns…

If your router replies to DNS requests for example when configured with Google’s DNS then it will do the same if you use opendns or any other DNS server…