Jump to content

This is the support site for Andrews & Arnold Ltd, a UK Internet provider. Information on these pages is generally for our customers but may be useful to others, enjoy!

Stopping Open DNS - FireBrick 105: Difference between revisions

← Older edit
Content deleted Content added
AA-Andrew (talk | contribs)
autoreview, Bureaucrats, editor, Interface administrators, reviewer, Administrators
12,616 edits
No edit summary
Reedy (talk | contribs)
editor
706 edits
→FireBrick 105: clean up
 
(11 intermediate revisions by one other user not shown)
Line 1: Line 1:
[[File:Firebrick105.gif]]
[[File:105-small.gif]]


=FireBrick 105:=
=FireBrick 105=
⚫
In a factory state the Fillters on a FireBrick 105 will not allow DNS to the FireBrick from the WAN - the default state is to block incoming traffic, but to allow outgoing traffic.


[[File:FireBrick-icons.png]]

⚫
'''In a factory state the Filters on a FireBrick 105 will not allow DNS to the FireBrick from the WAN - the default state is to block incoming traffic, but to allow outgoing traffic.
'''
However, in some cases, customers disable the firewall by adding a rule that allows all traffic in. In this case, a new rule is needed to block DNS to the FireBrick.
However, in some cases, customers disable the firewall by adding a rule that allows all traffic in. In this case, a new rule is needed to block DNS to the FireBrick.

==Instructions==


Create a Firewall filter to block port 53, from the WAN to the FireBrick, and make sure it's before any other rule that may allow this traffic in:
Create a Firewall filter to block port 53, from the WAN to the FireBrick, and make sure it's before any other rule that may allow this traffic in:



Name: BlockOpenDNS
Name: BlockOpenDNS
Line 15: Line 19:
Target ports: 53
Target ports: 53
Protocol: UDP
Protocol: UDP
*Then re-test from the Control Pages: https://clueless.aa.net.uk/dnsresolvers.cgi



[[File:FireBrick-OpenDNS-Rule.png]]
[[File:FireBrick-OpenDNS-Rule.png]]


[[Category:FireBrick]]
[[Category:Open DNS Resolvers]]
[[Category:AA Routers]]
Retrieved from "http://support.aa.net.uk/Stopping_Open_DNS_-_FireBrick_105"