Blocking WAN DNS resolving

Discussions for BiPAC 8800 series: 8800NL, 8800NLR2, 8800AXL, 8800AXLR2
Post Reply
Andrue
Posts: 5
Joined: Tue Dec 13, 2016 11:50 am

Blocking WAN DNS resolving

Post by Andrue »

Hi,

I'm upgrading from a 6300 to an 8800nl r2. With the 6300 I had to redirect port 53 to a non-existent LAN address in order to disable public DNS resolving. Is this still an issue with the 8800? The manual claims it as a feature (although why it should class it as a good thing I don't know). There's also this page from AAISP that applies to a different model of Billion.

It looks like I can do something similar with the 8800 but the page looks slightly different.

I emailed Billion support and got this slightly cryptic response:

"Is the firewall enabled for the WAN connection?? (Configuration >> WAN >> WAN Service, edit your WAN connection and see if the firewall option is ticked/enabled)"
billion_fan
Posts: 5398
Joined: Tue Jul 19, 2011 4:30 pm

Re: Shutting down the DNS relay

Post by billion_fan »

Andrue wrote:Hi,

I'm upgrading from a 6300 to an 8800nl r2. With the 6300 I had to redirect port 53 to a non-existent LAN address in order to disable the public DNS relay. Is this still an issue with the 8800? The manual claims it as a feature (although why it should class it as a good thing I don't know). There's also this page from AAISP that applies to a different model of Billion.

It looks like I can do something similar with the 8800 but the page looks slightly different.

I emailed Billion support and got this slightly cryptic response:

"Is the firewall enabled for the WAN connection?? (Configuration >> WAN >> WAN Service, edit your WAN connection and see if the firewall option is ticked/enabled)"
The 8800 is different to the 6300 series.

As long as the firewall is enabled on the WAN side your router should not respond to recursive DNS requests (if your firewall is not enabled your router will respond to recursive DNS requests, hence why we were asking if the firewall was enabled or not)

You can always test this using the following link to be sure :D

http://openresolver.com/?ip=
Andrue
Posts: 5
Joined: Tue Dec 13, 2016 11:50 am

Re: Blocking WAN DNS resolving

Post by Andrue »

Ah, great, thanks. Yes, the firewall will be on.
Post Reply