1

I have a custom DNS server in my network that I want all clients to use (it has ad-filters etc, similar to PiHole).

I have set my router (LinkSys Velop) to use this DNS server. However, on the DNS server's admin page, I see only the Router doing DNS queries, not the clients. I would assume that the router (sooner or later) tells the clients to use the specific DNS server. Despite restarting the clients (and doing various other network reset actions such as ipconfig /flushdns etc, they do not seem to access the DNS server directly however: only the router does.

So far, the only way I could get the clients access the DNS server directly was by entering the DNS Server manually at the client network config.

So questions:

  • Is this expected behavior?
  • Is the DNS setting in a (or only my?) router simply making the router continue to "act" as a DNS server and re-direct the request to the set IP address, then sending the result back?
  • What do I have to do so that clients set a specific IP address as a DNS server? Do I have to setup my own DHCP server?
  • Do the usual (e.g. ISC DHCP as in CentOS?) linux DHCP servers tell the client which DNS server to use or do they as well just forward the requests instead?

thanks!

uncovery
  • 295
  • 2
  • 12

3 Answers3

2

A router, as in just device+software that does the IP packet forwarding doesn't do anything with DNS or DHCP at all...

Though since you mentioned a device that is commonly used as SOHO/home broadband router. That is a device that is acts provides routing, NAT, Firewall, DNS, DHCP, and many other services.

Anyway when a client that is configured for IPv4 DHCP and doesn't have any static config connects to a network it will send out a DHCP request, that will include a request for the option 6 data which is a list of IPs to be used for DNS. The DHCP server may provide an answer with a list of IPs. Once a client get an answer it will continue to use those DNS servers until the address is released, or renewed and provided updated information.

So if you want to force a client to get updated DNS settings from the DHCP server you need to do a renew on the client. Though a restart, or disconnecting, and reconnecting the network interface will usually also trigger this.

SOHO/Home routers are usually pretty unconfigurable with the stock firmware. You can often get more control using non-standard firmware. Or just running the services on some other device on your network.

Zoredache
  • 128,755
  • 40
  • 271
  • 413
1

The DHCP server (probably running on your router) offers the clients the IP-address(es) of DNS servers they can use.

You need to adjust those.

If you can’t, a distinct possibility with SOHO routers, most likely the router itself will either offer clients the IP-addresses of the DNS server IP-addresses the router itself uses for DNS or the router will always offer its own IP-address as a DNS server. On the router you can then often (implicitly) configure forward and reverse DNS for your private network and for all other queries the router will forward the queries to its own external DNS servers.

In that latter example you will see that all client queries also seem to originate from the router IP-address

Bob
  • 5,335
  • 5
  • 24
0

I don't have a solution for the problem, but looks like there's a bug in the Linksys Velop (WHW03CFv2) router where it isn't sending the custom DNS servers you configure in the admin UI to the clients.

I can see this in Wireshark, the DHCP Option 6 (DNS server) will be set to the router's IP regardless what you configure in the UI.

Configuring the WINS server will be successfully transmitted to the client via DHCP Option 44.

KbLev
  • 71
  • 1
  • 5
  • The question finally is if it's supposed to send that info to the client or not – uncovery Mar 13 '22 at 00:51
  • Another issue I've noticed with my ISP-branded Linksys Velop is that it's impossible to turn off IPv6 DHCP. Even if I disable DHCP via the router admin UI (Connectivity -> Local Network -> DHCP Server: untick enabled), the router keeps advertising itself via the DHCPv6 protocol, with the DNS server set to itself (ipv6 address of router), I can see this in Wireshark. I also tried to disable IPv6 on the router altogether, while keeping DHCP disabled, and the router still keeps sending out the DHCPv6 packets - it's madness! I came across this while trying to deploy a Pi-hole on my local network. – KbLev Mar 20 '22 at 17:41