{"id":2882,"date":"2019-12-23T23:33:38","date_gmt":"2019-12-23T23:33:38","guid":{"rendered":"http:\/\/www.incredigeek.com\/home\/?p=2882"},"modified":"2019-12-23T23:35:00","modified_gmt":"2019-12-23T23:35:00","slug":"check-if-mikrotik-is-an-open-dns-resolver","status":"publish","type":"post","link":"https:\/\/www.incredigeek.com\/home\/check-if-mikrotik-is-an-open-dns-resolver\/","title":{"rendered":"Check if Mikrotik is an Open DNS Resolver"},"content":{"rendered":"\n<p><a href=\"https:\/\/www.openresolver.com\">https:\/\/www.openresolver.com<\/a><\/p>\n\n\n\n<p>You can test if a router is acting as an open DNS resolver by running the following command from a Linux terminal.  If you need to install dig, refer to <a href=\"https:\/\/www.incredigeek.com\/home\/install-dig-on-ubuntu-debian-or-kali-linux\/\">here<\/a> for Debian\/Ubuntu and <a href=\"https:\/\/www.incredigeek.com\/home\/install-dig-on-centos\/\">here<\/a> for RPM\/CentOS\/Fedora Distros.<\/p>\n\n\n\n<p>Replace 192.168.88.1 with the host you want to test against.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">dig +short test.openresolver.com TXT @192.168.88.1<\/pre>\n\n\n\n<p>If you receive the following<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">\"open-resolver-detected\"<\/pre>\n\n\n\n<p>The router is acting as an open resolver.  <\/p>\n\n\n\n<p>If you get <\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">;; connection timed out; no servers could be reached<\/pre>\n\n\n\n<p>Then you are unable to use that router to resolve DNS.  <\/p>\n\n\n\n<p>Example running the command against a Mikrotik router with Remote DNS turned on Then adding a firewall rule to block unwanted request.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">bob@localhost:~$ dig +short test.openresolver.com TXT @192.168.88.1\n\"open-resolver-detected\"\nbob@localhost:~$ \n<strong>&lt;&lt;-- Put firewall rule on router -->><\/strong>\nbob@localhost:~$ dig +short test.openresolver.com TXT @192.168.88.1\n;; connection timed out; no servers could be reached  \nbob@localhost:~$ <\/pre>\n\n\n\n<p><strong>Extra notes<\/strong><\/p>\n\n\n\n<p>If you have firewall rules allowing your IP address to use the router for DNS, then the above command to test will show it as an Open Resolver.  Ideally you would want a connection from the outside to test.  Or you can use this link and test it from the website.  <a href=\"https:\/\/www.openresolver.com\">https:\/\/www.openresolver.com<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>https:\/\/www.openresolver.com You can test if a router is acting as an open DNS resolver by running the following command from a Linux terminal. If you need to install dig, refer to here for Debian\/Ubuntu and here for RPM\/CentOS\/Fedora Distros. Replace &hellip; <a href=\"https:\/\/www.incredigeek.com\/home\/check-if-mikrotik-is-an-open-dns-resolver\/\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[573],"tags":[277,160,301,833,831,388,503],"class_list":["post-2882","post","type-post","status-publish","format-standard","hentry","category-security","tag-dns","tag-firewall","tag-mikrotik","tag-open-resolver","tag-resolver","tag-routeros","tag-security"],"_links":{"self":[{"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/posts\/2882","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/comments?post=2882"}],"version-history":[{"count":2,"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/posts\/2882\/revisions"}],"predecessor-version":[{"id":2886,"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/posts\/2882\/revisions\/2886"}],"wp:attachment":[{"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/media?parent=2882"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/categories?post=2882"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/tags?post=2882"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}