[skygunner]

Hi,

My DD-WRT Router's IP is 192.168.1.1, is is the DHCP server.
Pihole's upstream DNS server is 192.168.1.1
in the DD-WRT DNSmasq options I put in

dhcp-option=6,IP-of-pihole

The above settings works fine.

But it seems some clients would use DOT and not going through Pihole.
If I enalbe Forced DNS Redirection and Forced DNS Redirection DOT on DD-WRT, would those DNS requests go through the DD-WRT router directly, or they would be forwarded to the pihole set on dhcp-option=6?

[egc]

Moved this thread to the Advanced Networking forum, the general Questions forum is not the best place to ask for router help.

For using a PiHole with DDWRT see: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=331414
which is a sticky in this Advanced Networking forum.

Redirection will redirect DNS to the router.

To stop DoH traffic see the IPSET guide also a sticky in this forum.

[ho1Aetoo]

to block DoT i use the following rules

## block DoT
iptables -I FORWARD ! -s 192.168.1.110 -p tcp --dport 853 -j REJECT --reject-with tcp-reset
iptables -I FORWARD ! -s 192.168.1.110 -p udp --dport 853 -j REJECT --reject-with icmp-port-unreachable

192.168.1.110 = IP address of the Pi-Hole

this blocks all DoT queries that use the standard port except from the Pi-Hole itself.

a small test from my PC shows that the rules work