MikroTik DNS setup basics

If in the store you have managed to buy a MikroTik router for your home and you do not know why you need it, and poisoning of the DNS cache by your provider does not allow you to sleep at night, then this post is for you.





You don't have to suffer and put DNS from Yandex, Google, Adquard, etc., or you can go the more complicated way:





We open the site  https://root-servers.org  and look for our city, see what root DNS servers there are





There are 5 of them in St. Petersburg





If there are several of them, choose which one you like best :)





,  https://www.verisign.com DNS.





 https://www.publicdns.neustar, :)





WinBox http, .





1. DNS :





"use peer dns"





2. DNS (IP -> DNS), IP DNS  ( ). ( ).





, .





   DNS     DNS, , OpenNIC ( ).  https://www.opennic.org:





IP  https://wiki.opennic.org/#anycast_tier_2_dns_resolvers









/ip dns static add comment="OpenNIC" forward-to=185.121.177.177,169.239.202.202,2a05:dfc7:5::53::1,2a05:dfc7:5::5353::1 regexp=".*(\\.bbs|\\.chan|\\.cyb|\\.dyn|\\.geek|\\.gopher|\\.indy|\\.libre|\\.neo|\\.null|\\.o)\$" type=FWD







/ip dns static add comment="OpenNIC" forward-to=185.121.177.177,169.239.202.202,2a05:dfc7:5::53::1,2a05:dfc7:5::5353::1 regexp=".*(\\.oss|\\.oz|\\.parody|\\.pirate|\\.opennic.glue|\\.dns\\.opennic\\.glue)\$" type=FWD











DNS .





Microsoft Edge, "", .





:)





 https://www.dnsleaktest.com





What did it give me? The notifications from mihome worked fine, the Chinese bulbs stopped "blunting". Well, you also feel a bit like a  kulkhatsker, a  little more independent from your provider.





upd: the root DNS server (in the city) is not a public resolver and does not respond to requests, you need to enter the ip of the public resolver of this root DNS server. 








All Articles