Setting up MikroTik/RouterOS with Conditional DNS Forwarding (UnoTelly/UnblockUS)

I have a MikroTik RouterOS device that has some custom DNS settings and therefore I cannot change the DNS servers it provides to clients, which is a requirement to use UnoTelly or Unblockus. Instead I found the following article very helpful, it allows you to configure Conditional DNS forwarding for specific domains.

https://www.dalemacartney.com/2012/12/29/dns-conditional-forwarders-with-mikrotik-routeros/

This works well because I use MediaHint to swap back and forth for NetFlix US and Canada, but use only the US Amazon Prime.

/ip firewall layer7-protocol add name=domain.com regexp=domain.com
/ip firewall mangle add chain=prerouting dst-address=<routeripaddress> layer7-protocol=domain.com action=mark-connection new-connection-mark=domain.com-forward protocol=tcp dst-port=53
/ip firewall mangle add chain=prerouting dst-address=<routeripaddress> layer7-protocol=domain.com action=mark-connection new-connection-mark=domain.com-forward protocol=udp dst-port=53
/ip firewall nat add action=dst-nat chain=dstnat connection-mark=domain.com-forward to-addresses=<UnoTellyDNSServerIPAddress>
/ip firewall nat add action=masquerade chain=srcnat connection-mark=domain.com-forward

 


Did you like this article?


0 Shares:
You May Also Like

SueTube: sex, copyright, and rock & roll

Give this a gander. All of the current lawsuits against YouTube/Google, when they started taking down videos of Russel Peters and other popular shows. I cried.
SueTube: sex, copyright, and rock & roll -

Since its launch, YouTube has been a magnet for controversy. Ars looks at the popular video site's history of threats, lawsuits, and bans with an eye towards understanding what the landscape will look like once the dust settles.

Read More...

[Ars Technica]
Read More

Auto Bounced Messages Management vBulletin Module Helps Purge Bad Email Address On Your Forum

I was browsing through my mail spool on my machine, and I noticed that there were some messages in one of my accounts for a vBulletin forum. After further review, it was some bounce backs that had accumulated from users that didn't have a valid email address. I then started to do some Google searches for a vBulletin module (vBulletin's search is horrendous and practically useless) and found this module.
Read More