How to configure DNS filtering on Mikrotik devices

overview access your mikrotik via the winbox application or the web interface you can connect to the control panel using ssh, web, or winbox please note that in this guide we have used winbox to configure the device, which is recommended create the script first, you need to create a new script to synchronize your ip proceed as follows go to the system menu and then click on scripts in the window that opens, click on the + symbol under scripts choose a name to give the script, for example platformscript leave the default policies active in the source field, paste the following instruction \ tool fetch url= url https //ddns flashstart com/nic/update\\?username=user\&password=pass you must replace the words user and pass as follows user the dedicated username of your dynamic network pass the specific password of your dynamic network if your password contains special characters such as $ or ", you must enter the \ symbol before each of these characters for example, suppose you have the password password123$$, this must be written exactly as password123$$ this change is strictly necessary otherwise the mikrotik system would see those symbols as commands and not as simple characters click ok to save the changes schedule the script at this point, it is necessary to create a scheduler so that it automatically executes the script created earlier proceed as follows go to the system menu and click on scheduler in the window that opens, click on the + symbol under the scheduler heading choose a name to give the scheduler, for example platformscheduler choose the script execution time interval, for example 5 minutes the format must be hh\ mm\ ss, so in our case it will be 00 05 00 in the on event field, enter the exact name of the previously created script in our example, it will be platformscript click ok to save dns cloud filter configuration set the following dns addresses, either using a dhcp server or manually, on the various devices inside your network primary dns 185 236 104 104 secondary dns 185 236 105 105 alternatively, it is possible to change the dns used by the mikrotik so that the router ip itself is used as the only dns on the internal network devices to do this, proceed as follows go to the ip menu and click on dns in the window that opens, enter the following ips in the servers field respectively 185 236 104 104 185 236 105 105 click on the ok button to save if there is an address within the dynamic dns field on your dns settings, it means that the mikrotik also takes dns addresses from the dhcp of another device on the network like your main modem to avoid this, open the ip menu and click on dhcp client double click on the entry for the active dhcp client to open the respective properties, remove the check mark from the use peer dns item, and click ok to save optional deny dns changes by users you can create some firewall rules with the purpose of automatically redirecting all dns traffic on port 53 to our servers this way you will not need to change the dns settings on the individual devices inside the network to do this, open the ip menu and click on the firewall button then click on the nat tab and click on the add new button to create a new rule fill in the various fields as follows enabled check the box to enable the rule chain select dstnat from the drop down menu protocol choose udp dst port enter 53 in interface choose the internal network interface to be filtered by default it is called bridge1 action select dst nat to address enter the address 185 236 104 104 to port enter the port number chosen previously, which defaults to 53 if a port other than 53 was registered on your cloud panel, enter that specific port instead click ok to save finally, create another rule exactly the same as the previous one, except the protocol field must be tcp instead of udp related articles how to run scripts on multi wan scenarios on mikrotik docid\ ldnw37v8yqvnhveppafbw how to configure multiprofile on mikrotik docid\ bhcdfbrhm7um47dmfux1l