Draytek configuration

overview if you have not yet registered for the service, you can do so by visiting our registration page connect to the control panel by entering the ip address of the draytek device in the address bar of any browser then, log in by entering your administrative credentials configure dynamic dns service to configure the dynamic dns service, open the applications menu and then click on dynamic dns check the enable dynamic dns account option and fill in the various fields exactly as follows service provider choose customized or user defined provider host enter https //ddns flashstart com service api type /nic/update? auth type choose basic connection type select https server response leave this field completely blank login name enter the specific username assigned to your dynamic network inside our dashboard do not use your main registration email password enter the specific password assigned to your dynamic network determine real wan ip select wan ip finally, click ok to make the changes active enable the dhcp server at this point, you can enable the dhcp server so that it automatically assigns network parameters, including our filtered dns, to the various internal devices open the lan menu and click on general setup click on the details page button for your lan and enable the enable server item to activate the dhcp service then configure it as follows start ip address enter the first private ip in your local range ip pool counts set the number of ips to be handled by the dhcp service gateway ip address enter the ip address of your gateway, which is usually the local ip of your router lease time leave the default value of 86400 or enter your desired duration primary ip address enter 185 236 104 104 secondary ip address type 185 236 105 105 alternatively, the dns settings of the various devices within the network can be changed manually one by one optional deny dns changes by users it is possible to increase security by denying users the ability to browse unfiltered by manually changing the dns on their local devices open the firewall menu and click on filter setup at this point, you need to create rules to allow traffic on port 53 for the dns service on both tcp and udp protocols only to our specific cloud ips click on the first available number under the set column, and then on the 1 button under the filter rule column to create a new rule enable it by selecting check to enable the filter rule and configure it as follows allow primary dns direction choose lan/rt/vpn to wan source ip leave any destination ip click edit , select single address and enter 185 236 104 104 service type click edit , choose user defined with tcp and udp protocol, and enter the value 53 in the source and destination port fields click ok to save filter choose pass immediately from the drop down menu click ok to save and apply the changes allow secondary dns now we need to create another rule exactly similar to the previous one, except for the ip address of the destination ip field, which should be 185 236 105 105 block all other dns finally, it is necessary to create a drop rule to block all dns traffic directed to external ips other than our own proceed as follows direction choose lan/rt/vpn to wan source ip leave any destination ip leave any service type click edit , choose user defined with tcp and udp protocol, and enter the value 53 in the source and destination port fields click ok to save filter choose block immediately finally, click ok to create the rule