Stopping Open DNS - FireBrick 2700: Difference between revisions

From AAISP Support Site
mNo edit summary
 
(3 intermediate revisions by 3 users not shown)
Line 7: Line 7:
Config -> Edit -> Setup -> General system services -> DNS service settings -> local-only
Config -> Edit -> Setup -> General system services -> DNS service settings -> local-only


*Then re-test from the Control Pages: https://clueless.aa.net.uk/dnsresolvers.cgi
*Then re-test from the Control Pages: https://control.aa.net.uk/dnsresolvers.cgi


[[File:Fb2700-dns.png|600px]]
[[File:Fb2700-dns.png|600px]]
Line 16: Line 16:
The web interface of the FireBrick can list what services are open, go to
The web interface of the FireBrick can list what services are open, go to
Diagnostics -> Access Check
Diagnostics -> Access Check
Enter an Source IP of an IP on the Internet.
Enter a Source IP of an IP on the Internet.


The FireBrick will then list all the services open to that IP address, eg:
The FireBrick will then list all the services open to that IP address, e.g.:


DNS resolver access:-
DNS resolver access:-
Line 26: Line 26:


[[Category:Open DNS Resolvers]]
[[Category:Open DNS Resolvers]]
[[Category:Router]]
[[Category:AA Routers]]
[[Category:FireBrick]]
[[Category:FireBrick]]

Latest revision as of 08:01, 31 October 2021

2700-small.png

On a FireBrick 2700 the DNS service defaults to local-only - this prevents access to the FireBrick DNS resolver from the WAN by default.

The setting for this is found in the Web config editor at:

Config -> Edit -> Setup -> General system services -> DNS service settings -> local-only

Fb2700-dns.png


Testing Access

The web interface of the FireBrick can list what services are open, go to

Diagnostics -> Access Check

Enter a Source IP of an IP on the Internet.

The FireBrick will then list all the services open to that IP address, e.g.:

DNS resolver access:-
This address is not on a local Ethernet subnet and so not allowed access.