Community discussions

MikroTik App
 
roe1974
Member Candidate
Member Candidate
Topic Author
Posts: 150
Joined: Mon Dec 31, 2018 2:14 pm

NextDNS DoH ... Identify your devices !?

Tue Jun 01, 2021 10:58 am

Identify your devices

NextDNS writes on its homepage that the following method can be used to identify the devices:

DNS-over-HTTPS
Append the name to the given URL (the name should be URL-encoded).
For "Johns Firefox" you would use https://dns.nextdns.io/xxxxx/Johns%20Firefox as the DNS-over-TLS endpoint.

Can the MikroTik router (RB4011) be configured to send the client information along ?
Thank you, greetings Richard
 
User avatar
Znevna
Forum Guru
Forum Guru
Posts: 1347
Joined: Mon Sep 23, 2019 1:04 pm

Re: NextDNS DoH ... Identify your devices !?

Tue Jun 01, 2021 11:46 am

In the Setup / Setup Guide section of your chosen nextdns config there's a section for MikroTik under Routers, did you encounter a problem with those instructions?
 
roe1974
Member Candidate
Member Candidate
Topic Author
Posts: 150
Joined: Mon Dec 31, 2018 2:14 pm

Re: NextDNS DoH ... Identify your devices !?

Tue Jun 01, 2021 12:05 pm

no ... i followed this instruction:
/tool fetch url=https://curl.se/ca/cacert.pem
/certificate import file-name=cacert.pem
/ip dns set servers=
/ip dns static add name=dns.nextdns.io address=45.90.28.0 type=A
/ip dns static add name=dns.nextdns.io address=45.90.30.0 type=A
/ip dns set use-doh-server=“https://dns.nextdns.io/xxxxx” verify-doh-cert=yes
DoH works .... thats not the problem.
But in the NextDNS GUI, section "statistics" i see only "Unidentified devices" .... :-(

br, Richard
 
User avatar
Znevna
Forum Guru
Forum Guru
Posts: 1347
Joined: Mon Sep 23, 2019 1:04 pm

Re: NextDNS DoH ... Identify your devices !?

Tue Jun 01, 2021 12:32 pm

You follow the instructions from "Identify your devices" -> DoH section, Firefox is used just as an example name in there, you can use it the same way everywhere you're using DoH.
Append the name to the provided URL (the name should be URL encoded).
see:
/ip dns set use-doh-server="https://dns.nextdns.io/XXXXXXX/Znevna's%20CHR-VM-02" verify-doh-cert=yes
and on NextDNS / Logs:
NextDNS MikroTik.PNG
You do not have the required permissions to view the files attached to this post.
Last edited by Znevna on Tue Jun 01, 2021 12:47 pm, edited 1 time in total.
 
roe1974
Member Candidate
Member Candidate
Topic Author
Posts: 150
Joined: Mon Dec 31, 2018 2:14 pm

Re: NextDNS DoH ... Identify your devices !?

Tue Jun 01, 2021 12:38 pm

ok, so i see the router requesting the DNS querys .. but not the clients (i.e. iPhone, NAS, Sonos, etc.) behind that requests the DNS querys (like pihole) ... right ?
 
User avatar
Znevna
Forum Guru
Forum Guru
Posts: 1347
Joined: Mon Sep 23, 2019 1:04 pm

Re: NextDNS DoH ... Identify your devices !?

Tue Jun 01, 2021 12:41 pm

To make that happen you'd have to use DoH in every of those devices with some other name for each of them appended to the URL.
 
roe1974
Member Candidate
Member Candidate
Topic Author
Posts: 150
Joined: Mon Dec 31, 2018 2:14 pm

Re: NextDNS DoH ... Identify your devices !?

Tue Jun 01, 2021 12:47 pm

ok thx, that is not possible with clients like sonos, smaungsTV, etc ;-)
could this help ?

https://github.com/nextdns/nextdns

one of the features:

Auto discovery and forwarding of LAN client's name and model.

br, Richard
 
User avatar
Znevna
Forum Guru
Forum Guru
Posts: 1347
Joined: Mon Sep 23, 2019 1:04 pm

Re: NextDNS DoH ... Identify your devices !?

Tue Jun 01, 2021 1:10 pm

If you install that on any of the supported devices and use that as your LAN's DNS with a preconfigured hosts file or something, maybe.
Since MikroTik doesn't use anywhere the hostnames from DHCP Leases, you'd have to script it: https://wiki.mikrotik.com/wiki/Setting_ ... DHCP_lease
Or use another DHCP server.
Then there's the problem with clients requesting via IPv6, if you use IPv6.

short: NO
 
roe1974
Member Candidate
Member Candidate
Topic Author
Posts: 150
Joined: Mon Dec 31, 2018 2:14 pm

Re: NextDNS DoH ... Identify your devices !?

Tue Jun 01, 2021 1:41 pm

Thx for the answer :-)

Who is online

Users browsing this forum: GoogleOther [Bot], Grumpy, mozerd and 57 guests