I'm trying to configure my Fios G1100 to force DNS request to my internal DNS server 192.168.1.131
. This device runs Pi-hole, which is configured to make DNS request to 1.1.1.3
and 1.0.0.3
. This has worked great!
But, now I'm trying to restrict devices on the network from circumventing the DHCP's DNS server by manually configuring DNS. I had initially come across this article which gives a method to avoid this circumvention: How to prevent users from circumventing OpenDNS using firewall rules.
So, I have set up my Fios G1100 with the follow Access Control rule:
As I understand it, this rule will only allow 192.168.1.0
, 192.168.1.1
, 192.168.1.131
to make DNS request out of LAN.
I have rebooted the G1100 and verified that DNS requested were still working and routing through 192.168.1.131
. They are.
Then on my Mac, I have gone into System Preferences -> Network -> Wi-Fi:Advanced -> DNS
and added the 8.8.8.8
DNS server. Sure enough DNS is blocked on the device.
However, when I do the same thing on my Pixel 2 XL, the DNS requests are resolved and 192.168.1.131
is bypassed. I have mobile data turned off, and the Wi-Fi configuration is as follows:
Proxy: None
IP settings: Static
Privacy: Use device MAC
IP address: 192.168.1.120
Gateway: 192.168.1.1
Network prefix length: 24
DNS 1: 1.1.1.1
What is allowing Android to bypass the Access Control rule?