MikroTik Tutorial 63 - Prevent users from changing their DNS

Learn MikroTik RouterOs Tutorial Series (english)

In this tutorial you will learn how to Prevent users from changing their DNS by forcing them to a specific DNS server.

Mikrotik supported devices
RB951Ui-2nD,hAP
RB3011UIAS-RM
RB2011UiAS-2HnD-IN
RB750Gr2
hEX,RB750Gr3
RB2011iLS-IN
CRS109-8G-1S-2HnD-IN
hAP lite
hAP ac mAP
wAP
RB951Ui-2HnD
RB951G-2HnD
RB2011UiAS-2HnD-IN
RB941-2nD-TC
RB2011iL-RM
RB2011UiAS-IN
RB2011UiAS-RM
RB1100AHx4
CCR1009-7G-1C-PC
CCR1009-7G-1C-1S+PC
LDF 5
SXTsq Lite5
DISC Lite5
SXT Lite2
SXTsq 5 ac
LHG 2
Groove 52
LHG 5
LHG XL 2
LHG HP5
SXT 2
LHG
OmniTIK 5
BaseBox
wAP 60G,SEXTANT G
OmniTIK 5
mANTBox
QRT
DynaDish

[iconnectbymvgozalo]

Thank you very much! Very straight to the point tutorials.

[adammostafa]

is there an alternative way for zte router ?? . and thanke you for you amazing tutorials

[brotheradamfromups]

How do I get this to work running a local pihole DNS that blocks certain domains and forwards all other requests to google dns?

[amieka]

Can I use this rule for multiple DNS ?

[hijackthat]

this is so good, however can you tell us how to block users that use DoT or DoH?

[TheRashyyd]

My net stops browsing the minute I apply this changes, can you guess what could be the problem?

[grimpr]

Thanks, how do you redirect to the local mikrotik dns server that forwards to opendns?

[spiritcore]

Very useful, thank you!
Do you know why it blocks ping from my PC?
Everything works OK but I can't ping when the rule is enabled...

[kevinmiole]

how to you add alternate dns? separate addresses with what?

[richardayuyang]

How about multiple redirections to multiple DNS, I have 2 piholes in my network. TIA

[JaZzDeOliveira]

Hi, how do I get this to work when running multiple Mikrotik Hotspots?
I have two seperate hotspots. 1 is for guest and 1 is for kids. I have set a different DNS for each subnet. But after users sign in on the login page, I see that all DNS queries are sent to the DNS set on the Mikrotik router and even with the above NAT rule specifying to go external DNS.


All DNS queries are still going to the Router DNS and not to the set DNS.



Any suggestions on how to fix this, as the issue only occurs when using Hotspot.

[hazartilirot]

The tip is useful. I can force users to force my inner DNS server but what should be done provided the DNS server at the same subnet - it cannot resolve host :D

[potskie]

Hi, i just want to know if mikrotik can also prevent user to share their internet to other wifi devices.

[ncduong]

Hello, I install AdguardHome on RasPi, AdGuardHome DNS uses port 53 to listen. Unfortunately port 53 is also being used by Router Mikrotik's Hostspot service. How can I fix it? :(

[RaviPatel-fqlq]

hi i want to Force users to use specified our DNS server on mikrotik can we use the rule

[dffabryr]

Your tutorials are very useful and effective. Thank you very much !!

[JaZzDeOliveira]

This rule does not seem to work anymore, any suggestions with the new routeros version

[derrickt.za]

Can you please do a tutorial on user manager 7.1.2 version. I cannot get user to connect to the internet. Thank You

[SpikeHome]

great tutotrial, but kan i also force users to use my local dns cache server at my mikrotik router?

[shokowillard]

Great tutorial keep up the great work. May you please add tutorial for different wireless modes (station, station pseudobridge, pseudobridge clone, station wds, nstreme dual slave etc)