Community discussions

MikroTik App
 
ashpri
Member Candidate
Member Candidate
Topic Author
Posts: 154
Joined: Sun Oct 14, 2018 3:11 am

Are these redundant dns firewall rules?

Wed May 29, 2019 3:25 am

I have this rule in my firewall (following a firewall guide):

/ip firewall filter
add action=accept chain=input comment="IN - Accept DNS Request" dst-port=53 in-interface-list=LAN protocol=tcp
add action=accept chain=input comment="IN - Accept DNS Request" dst-port=53 in-interface-list=LAN protocol=udp

I also have this rule in my mangle (following queue tree guide):

/ip firewall mangle
add action=accept chain=prerouting comment=Router dst-address-list="IP Router"
add action=accept chain=forward comment=DNS port=53 protocol=tcp
add action=accept chain=forward comment=DNS port=53 protocol=udp

Are they redundant? Which do you suggest deleting. Thank you.
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 19363
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: Are these redundant dns firewall rules?

Wed May 29, 2019 5:06 pm

What you need to answer to yourself is the purpose of the two sets of rules. then we can assess the validity of one or both. We cannot guess what you are thinking LOL.

SET A: Purpose.... I want to

SET B: Purpose..... I will use these rules to........
 
User avatar
Steveocee
Forum Guru
Forum Guru
Posts: 1120
Joined: Tue Jul 21, 2015 10:09 pm
Location: UK
Contact:

Re: Are these redundant dns firewall rules?

Sat Jun 01, 2019 8:34 am

Without getting a look at all of your rules it's difficult to advise. Your setup must b vastly different to mine but I don't need either of those for local DNS to work.

Who is online

Users browsing this forum: Amazon [Bot], Bing [Bot], dvdlss, fxcd, gigabyte091, Google [Bot], jaclaz, unhuzpt, wfburton and 58 guests