Author
Message
smk87 DD-WRT Novice Joined: 24 Oct 2025 Posts: 5
Posted: Sat Nov 15, 2025 9:14 Post subject: Custom dns not working when connection to Wireguard VPN
Hello. I am using Surfshark VPN via Setup/Tunnels. It's working fine. But I want to use a custom DNS server (76.76.2.32, 76.76.10.32) from Control D instead of using Surfshark's DNS. I saw various solutions in many places and tried setting the static DNS, DNSmasq commands, iptable commands, etc. But nothing is working; it is still using Surfshark's DNS. If I don't use the VPN, then the custom DNS works.
Firmware: DD-WRT v3.0-r62540 std (11/05/25)
Router: TL-WR940N V6
Description:
Filesize:
33.58 KB
Viewed:
1690 Time(s)
Description:
Filesize:
44.26 KB
Viewed:
1690 Time(s)
Back to top
Sponsor
egc DD-WRT Guru Joined: 18 Mar 2014 Posts: 13880 Location: Netherlands
Posted: Sat Nov 15, 2025 9:54 Post subject:
Surfshark might just intercept all your DNS53, Mullvad also does this, with Mullvad you can opt out.
Ask Surfshark
Better use encrypted DNS that cannot be intercepted
_________________ Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read): https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
Back to top
smk87 DD-WRT Novice Joined: 24 Oct 2025 Posts: 5
Posted: Sat Nov 15, 2025 10:10 Post subject:
egc wrote: Surfshark might just intercept all your DNS53, Mullvad also does this, with Mullvad you can opt out.
Ask Surfshark
Better use encrypted DNS that cannot be intercepted
According to this reddit it seems it should work: https://www.reddit.com/r/surfshark/comments/1eoldzj/i_want_to_use_3rd_party_dns_like_adguard_or/?rdt=34777
My router doesn't support encypted dns sadly. Also, I don't want to setup dns in the client level. I want to setup it on the router level so that all the device connected to the router use it.
Back to top
egc DD-WRT Guru Joined: 18 Mar 2014 Posts: 13880 Location: Netherlands
Posted: Sat Nov 15, 2025 10:20 Post subject:
Ask surfshark you are paying them if they intercept DNS53 and if you can opt out
If that is not possible get a better router, your router looks like to have 4 MB flash and 32 MB RAM that is not usable any more
Routers with sufficient resources have standard encrypted DNS e.g. SmartDNS, Unbound etc.
_________________ Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read): https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
Back to top