Stopping Open DNS - ZyXEL P660R-D1
The factory setting for this router on older firmware is for DNS to be open on the WAN IP as well as the LAN IP. This will be changed when configured by AAISP, but if it is configured from new, or reset, then WAN side DNS may need to be disabled.
Changing DNS Settings via the Web Interface
This can be done from the web interface and setting DNS Access Status to LAN. Go to:
> Advanced - Remote MGMT - DNS
Then re-test from the Control Pages: https://clueless.aa.net.uk/dnsresolvers.cgi
The LAN/WAN here are relating to the LAN/WAN IP addresses, not the LAN/WAN interfaces.
Changing DNS Settings via Telnet
If you still can't access the router web pages, then you can do this via telnet by running the following commands:
View the current access settings (for all services)
sys server load sys server disp
To make the change to the access:
sys server load sys server access dns 1 sys save
Note: Allowed access type: 0:ALL, 1:None, 2:LAN IP only, 3:WAN IP only
The DNS checker is saying DNS is still open
If you have publicly routed IP addresses on the LAN side of the router then you may wish to disable the resolver completely instead of restricting it to the LAN IP, as the LAN IPs will be still be accessible from the outside world.
What is the IP address of the router?
Most routers supplied by AAISP will have a sticker or card on the base of the router which will have the IP address.
What is the admin username and password?
Most routers supplied by AAISP will have a sticker or card on the base of the router which will have the password. On the ZyXEL the username is admin.
I am Unable to get to the web interface?
Sometimes the webserver on the router stops working, try turning the router off and on again.
Does this apply to other routers?
This also applies to the P-660HW-T1 v2 Router, and probably other ZyXELs