Router secure DNS configuration
This video will demonstrate setting up the DOH DNS server. Also see Part 5A.
To activate secure DNS use following terminal syntax:
Build your own home for the cost of materials and save big, info at https://www.drystacked.com
/tool fetch url=https://curl.se/ca/cacert.pem
#results:
status: finished
total: 199KiB
duration: 1s
/certificate import file-name=cacert.pem passphrase=""
#results
certificates-imported: 128
private-keys-imported: 0
files-imported: 1
decryption-failures: 0
keys-with-no-certificate: 0
/ip dns
set use-doh-server=https://cloudflare-dns.com/dns-query verify-doh-cert=yes
DOH is now installed
/ip dns static
add name=cloudflare-dns.com address=104.16..248.249
add name=cloudflare-dns.com address=104.16.249.249
add name=cloudflare-dns.com address=2606:4700:4700::6810:f8f9
add name=cloudflare-dns.com address=2606:4700:4700::6810:f9f9
static entries added
/ip dns
set servers=""
clear legacy servers
/ip dhcp-client
set 0 use-peer-dns=no
disregard upstream DNS server requests
/ipv6 dhcp-client
set 0 use-peer-dns=no
disregard upstream DNS server requests
all DNS lookups are now done with this router using DOH.