7800DXL - Disable Internal DNS Server

[aesmith]

Hi,

Does anyone know how to disable the internal DNS server on the 7800DXL, or specifically how to prevent it responding to DNS lookups from the Internet? This is a risk to have that open as the router could be subject to a DNS attack. I've created a rule blocking inbound packets to port 53 from the outside, but if for example I point nslookup from work at my home external IP address, I still get a response. It appears that this processing bypasses the IP filter rules, or is carried out prior to checking the rules.

Thanks,

Tony S

[billion_fan]

Hi,

Does anyone know how to disable the internal DNS server on the 7800DXL, or specifically how to prevent it responding to DNS lookups from the Internet? This is a risk to have that open as the router could be subject to a DNS attack. I've created a rule blocking inbound packets to port 53 from the outside, but if for example I point nslookup from work at my home external IP address, I still get a response. It appears that this processing bypasses the IP filter rules, or is carried out prior to checking the rules.

Thanks,

Tony S

You need to remove the incoming rule, should then work fine. (I get DNS request timed out)

[aesmith]

Thanks, that works. Looks like I was misinterpreting what "Shields Up" was telling me, because adding that rule changed port 53 from "stealth" to "blocked". However at that time I couldn't test from outside the network.