nanog mailing list archives

Re: Asus wifi AP re-writing DNS packets


From: Alarig Le Lay <alarig () swordarmor fr>
Date: Thu, 29 Oct 2020 10:41:43 +0100

On Thu 29 Oct 2020 02:10:25 GMT, Anurag Bhatia wrote:
I tried deleting the rule and it drops the traffic completely. So DNS
resolution stops working and I am unsure why. It's not like default drop or
anything. I can edit the rule and whatever active port 53 related rule is
there works. But I want case of no such rule at all. :-)

Did you try to add
        -t nat -A POSTROUTING -p tcp -m tcp --dport 53 -j ACCEPT
        -t nat -A POSTROUTING -p udp -m udp --dport 53 -j ACCEPT

after the deletion?

-- 
Alarig


Current thread: