Stopping Open DNS - ZyXEL P660R-D1: Difference between revisions

The factory setting for this router on older firmware is for DNS to be open on the WAN IP as well as the LAN IP. This will be changed when configured by AAISP, but if it is configured from new, or reset, then WAN side DNS may need to be disabled.

=Changing DNS Settings via the Web Interface=

This can be done from the web interface and '''setting DNS Access Status to LAN'''. Go to:

> Advanced - Remote MGMT - DNS

Then re-test from the Control Pages: https://clueless.aa.net.uk/dnsresolvers.cgi

The LAN/WAN here are relating to the LAN/WAN IP addresses, not the LAN/WAN interfaces.

=Changing DNS Settings via Telnet=

If you still can't access the router web pages, then you can do this via telnet by running the following commands:

View the current access settings (for all services)

sys server load

sys server disp

To make the change to the access:

sys server load

sys server access dns 1

sys save

Note: Allowed access type: 0:ALL, 1:None, 2:LAN IP only, 3:WAN IP only

=FAQ=

==The DNS checker is saying DNS is still open==

If you have publicly routed IP addresses on the LAN side of the router then you may wish to disable the resolver completely instead of restricting it to the LAN IP, as the LAN IPs will be still be accessible from the outside world.

==Does this apply to other routers?==

This also applies to the P-660HW-T1 v2 Router, and probably other ZyXELs

==See also==

*[[:Category:Open DNS Resolvers]]

*[[Router - ZyXEL P660R-D1]]

[[Category:AA Routers]]

[[Category:3rd Party Routers]]