R7000 no DNS config works

Post new topic   Reply to topic    DD-WRT Forum Index -> Broadcom SoC based Hardware
Author Message
latestthing
DD-WRT Novice


Joined: 06 Mar 2022
Posts: 3

PostPosted: Sun Mar 06, 2022 6:52    Post subject: R7000 no DNS config works Reply with quote
I have reset to factory defaults and flashed to latest (Firmware: DD-WRT v3.0-r48432 std (03/01/22).

In an effort to get ANY DNS to work I have tried using default settings (to use my ISP DNS) and that did not work.

I have tried many configurations (and read so many posts and tutorials i can't keep track andam at my wit's end) but currently have it set to use cloudflare DNS. I have attached screenshots of this config. (please let me know if there are other relevant setting I might be missing!)

No matter what I try, nothing can resolve DNS.






Sponsor
Alozaros
DD-WRT Guru


Joined: 16 Nov 2015
Posts: 6437
Location: UK, London, just across the river..

PostPosted: Sun Mar 06, 2022 7:49    Post subject: Reply with quote
first make sure your NTP time is working and router receives correct time..
Basic set up>down at the bottom NTP time...

also disable 'Query DNS in strict order'

than try to add those lines to advanced DNSmasq options

no-resolv
server=1.1.1.1
server=1.0.0.1


there may be an option, where your ISP DNS is forcing a strict use of their DNS provided...but, as you tried already ISP dns and its not working this is suspicious...

also to override it, in case of forced DNS try to turn on encrypt DNS option as a last measure...

_________________
Atheros
TP-Link WR740Nv1 ---DD-WRT 55630 WAP
TP-Link WR1043NDv2 -DD-WRT 55723 Gateway/DoT,Forced DNS,Ad-Block,Firewall,x4VLAN,VPN
TP-Link WR1043NDv2 -Gargoyle OS 1.15.x AP,DNS,QoS,Quotas
Qualcomm-Atheros
Netgear XR500 --DD-WRT 55779 Gateway/DoH,Forced DNS,AP Isolation,4VLAN,Ad-Block,Firewall,Vanilla
Netgear R7800 --DD-WRT 55819 Gateway/DoT,AD-Block,Forced DNS,AP&Net Isolation,x3VLAN,Firewall,Vanilla
Netgear R9000 --DD-WRT 55779 Gateway/DoT,AD-Block,AP Isolation,Firewall,Forced DNS,x2VLAN,Vanilla
Broadcom
Netgear R7000 --DD-WRT 55460 Gateway/SmartDNS/DoH,AD-Block,Firewall,Forced DNS,x3VLAN,VPN
NOT USING 5Ghz ANYWHERE
------------------------------------------------------
Stubby DNS over TLS I DNSCrypt v2 by mac913


Last edited by Alozaros on Sun Mar 06, 2022 8:20; edited 1 time in total
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 12885
Location: Netherlands

PostPosted: Sun Mar 06, 2022 7:55    Post subject: Reply with quote
Reset to defaults and put settings in manually.
from CLI interface/Putty:
nvram erase && reboot

For DNS settings On Setup page:
tick/enable "Ignore WAN DNS"

As DNS servers use (Static DNS 1 and 2):
1.1.1.1
1.0.0.1

(1.1.0.0 is not a valid DNS server!)

On services page make sure you Disable "Query DNS in Strict Order"
When you have reset to defaults on a recent build it should already be disabled.

_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 14221
Location: Texas, USA

PostPosted: Sun Mar 06, 2022 11:48    Post subject: Reply with quote
I still haven't disabled query in strict order. And I don't use any static DNS entries, everything is via additional configs and I use forced DNS redirection option.
_________________
"Life is but a fleeting moment, a vapor that vanishes quickly; All is vanity"
Contribute To DD-WRT
Pogo - A minimal level of ability is expected and needed...
DD-WRT Releases 2023 (PolitePol)
DD-WRT Releases 2023 (RSS Everything)

----------------------
Linux User #377467 counter.li.org / linuxcounter.net
mrjcd
DD-WRT Guru


Joined: 31 Jan 2015
Posts: 6290
Location: Texas

PostPosted: Sun Mar 06, 2022 14:06    Post subject: Reply with quote
just throwing this out --- I am a bit 'across the way' since I use the EA8500 ...but anyways:

kernel-panic69 wrote:
I still haven't disabled query in strict order. And I don't use any static DNS entries, everything is via additional configs and I use forced DNS redirection option.


haven't disabled query in strict order ---> yea, me either

I don't use any static DNS entries ---> nah, I use:
64.6.64.6
64.6.65.6
those two are public 'Verisign' DNS servers... they do DNSSEC also
I just never was a big fan of cloudfare Razz

everything is via additional configs ---> I never used such

use forced DNS redirection option ---> always & forever

Ignore WAN DNS ---> enabled

all is kinda currently moot for me since I enabled 'unbound' last week
NO special reason ---> only testing it see iffin the big guy, BS breaks somepin...it is worky all good Cool
most likely & just for hellofit will go back to Verisgn DNS soon
latestthing
DD-WRT Novice


Joined: 06 Mar 2022
Posts: 3

PostPosted: Mon Mar 07, 2022 2:12    Post subject: Re: R7000 no DNS config works Reply with quote
Firstly thank you all for the attempts at troubleshooting. I have tried all of the mentioned tips, but the problem remains that I cannot resolve DNS server.

I have noticed that my dnsmasq.conf file has a line that does not seem to be represented in the GUI and I am suspicious that it is causing the issue. I have bolded the suspicious line below (server=127.0.0.1#30)

following images is my config attempting to use quad9 encrypted DNS and here is my dnsmasq.conf file:
interface=br0
resolv-file=/tmp/resolv.dnsmasq
strict-order
server=127.0.0.1#30
no-resolv
dhcp-leasefile=/tmp/dnsmasq.leases
dhcp-lease-max=190
dhcp-option=br0,3,192.168.1.1
dhcp-authoritative
dhcp-range=br0,192.168.1.64,192.168.1.253,255.255.255.0,1440m
bogus-priv
conf-file=/etc/rfc6761.conf
clear-on-reload
stop-dns-rebind
dhcp-option=252,"\n"
cache-size=1500
no-resolv
server=9.9.9.9
server=9.9.9.10





please let me know if anybody knows where that server=127.0.0.1#30 is coming from and if that is normal.
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 12885
Location: Netherlands

PostPosted: Mon Mar 07, 2022 6:42    Post subject: Reply with quote
Well it does not look like you followed my advice Sad
_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
foz111
DD-WRT Guru


Joined: 01 Oct 2017
Posts: 707
Location: Earth

PostPosted: Mon Mar 07, 2022 9:00    Post subject: Reply with quote
You can lead a horse to water but you can't make it drink !
_________________
Netgear R7800 PPPoE Main Router
Network IPV4 - Isolated Vlan's with IoT Devices. Unifi AC-Pro x 3 AP's, Router Wi-Fi Disabled. OVPN Server With Paid Commercial Wireguard Client's. Gateway Mode, DNSMasq, Static Leases & DHCP, Pi-Hole DNS & Running Unbound.

No one can build you the bridge on which you, and only you, must cross the river of life!
redhawk0
DD-WRT Guru


Joined: 04 Jan 2007
Posts: 11564
Location: Wherever the wind blows- North America

PostPosted: Mon Mar 07, 2022 12:21    Post subject: Reply with quote
Try setting your gateway to 192.168.1.1
Enable "Recursive DNS Resolving (Unbound) and Forced DNS Redirection.

Remove all DNS addresses on the Setup>>Basic page.

duplicate my setup on Services>Services

See if that works.

redhawk



basic.jpg
 Description:
 Filesize:  53.45 KB
 Viewed:  3088 Time(s)

basic.jpg



servces.jpg
 Description:
 Filesize:  44.39 KB
 Viewed:  3088 Time(s)

servces.jpg


ho1Aetoo
DD-WRT Guru


Joined: 19 Feb 2019
Posts: 2976
Location: Germany

PostPosted: Mon Mar 07, 2022 13:02    Post subject: Reply with quote
why are upstream dns servers entered in the additional dnsmasq config if unbound is activated?

makes no sense
Alozaros
DD-WRT Guru


Joined: 16 Nov 2015
Posts: 6437
Location: UK, London, just across the river..

PostPosted: Tue Mar 08, 2022 15:42    Post subject: Reply with quote
latestthing using encrypted DNS option, usually adds this line to the DNSmasq.config

server=127.0.0.1#30

and shortly... this is how encrypted DNS works...

than, if you add another lines like those

server=9.9.9.9
server=1.1.1.1

you cause your own mess...as DNSmasq will get messy

you either use one of those options...either encrypted DNS or added servers= in advance DNSmasq box

your best bet is to use only encrypted DNS....
if its not working, than you must have troubles...more often NTP time is not correct...

choose correct time zone and,
add this IP to basic settings>ntp time box
162.159.200.1

this is cloudflare ntp time server...

than save apply and reboot...

for more advanced uses of DNS services check red and green links in my signature...

_________________
Atheros
TP-Link WR740Nv1 ---DD-WRT 55630 WAP
TP-Link WR1043NDv2 -DD-WRT 55723 Gateway/DoT,Forced DNS,Ad-Block,Firewall,x4VLAN,VPN
TP-Link WR1043NDv2 -Gargoyle OS 1.15.x AP,DNS,QoS,Quotas
Qualcomm-Atheros
Netgear XR500 --DD-WRT 55779 Gateway/DoH,Forced DNS,AP Isolation,4VLAN,Ad-Block,Firewall,Vanilla
Netgear R7800 --DD-WRT 55819 Gateway/DoT,AD-Block,Forced DNS,AP&Net Isolation,x3VLAN,Firewall,Vanilla
Netgear R9000 --DD-WRT 55779 Gateway/DoT,AD-Block,AP Isolation,Firewall,Forced DNS,x2VLAN,Vanilla
Broadcom
Netgear R7000 --DD-WRT 55460 Gateway/SmartDNS/DoH,AD-Block,Firewall,Forced DNS,x3VLAN,VPN
NOT USING 5Ghz ANYWHERE
------------------------------------------------------
Stubby DNS over TLS I DNSCrypt v2 by mac913
latestthing
DD-WRT Novice


Joined: 06 Mar 2022
Posts: 3

PostPosted: Tue Mar 15, 2022 1:17    Post subject: Reply with quote
just FYI to any others that see this. It simply started working again on its own. My only viable theory is that my ISP (comcast xfinity Crying or Very sad ) did something that broke custom DNS or even encrypted DNS somehow and then fixed it.

I had encrypted DNS settings and it didn't work for days and then suddenly did with no changes to settings.
mrjcd
DD-WRT Guru


Joined: 31 Jan 2015
Posts: 6290
Location: Texas

PostPosted: Tue Mar 15, 2022 1:34    Post subject: Reply with quote
Check what DNS servers you are using from:

https://www.top10vpn.com/tools/what-is-my-dns-server/
OR
https://ipleak.net/

also NOTE:
the silly mozilla people with last few new FireFox browsers has 'DNS over HTTPS' enabled by default
so that will get around most common router settings unless you disable it...
which I always make sure 'DNS over HTTPS' is disabled because FF default is to use Cloudflare servers
for it AND I am NOT a fan of them Twisted Evil
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Index -> Broadcom SoC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum