Cannot configure OpenDNS servers on Huawei HG8245 router, ISP MyRepublic Indonesia

bayazidbh · ‎11-03-2017

As the title said, I cannot configure my router to use OpenDNS for some reason. I can open the router page and enter the DNS servers in the DHCP server configuration just fine. But even after applying, the result page said that no, I am not using OpenDNS. I can use OpenDNS just fine via Simple DNSCrypt, or indeed any DNS resolvers from there, but I can't use it on my router. I also can't use it on my Android phone (Stock Android Nougat 7.1.2) both when I use the DNSChanger app (it does nothing - doesn't even matter what DNS configuration I'm using) and when I use it via the Static option on the WiFi setting, it makes the connection unable to connect to internet. I can, however, use OpenDNS via DNSChanger when I use cellular data connection and, as I recall, the WiFi in my college.

So either it's my router or my ISP altogether.

The diagnostic commands returned the following:

C:\Users\[obscured]>nslookup -type=txt debug.opendns.com. 208.67.220.220
Server: resolver2.opendns.com
Address: 208.67.220.220

*** resolver2.opendns.com can't find debug.opendns.com.: Non-existent domain

C:\Users\[obscured]>nslookup -type=txt which.opendns.com.
1.0.0.127.in-addr.arpa
primary name server = localhost
responsible mail addr = nobody.invalid
serial = 1
refresh = 600 (10 mins)
retry = 1200 (20 mins)
expire = 604800 (7 days)
default TTL = 10800 (3 hours)
(root) ??? unknown type 41 ???
Server: UnKnown
Address: 127.0.0.1

Non-authoritative answer:
which.opendns.com text =

"m37.sin"

(root) ??? unknown type 41 ???

C:\Users\[obscured]>nslookup whoami.akamai.net.
1.0.0.127.in-addr.arpa
primary name server = localhost
responsible mail addr = nobody.invalid
serial = 1
refresh = 600 (10 mins)
retry = 1200 (20 mins)
expire = 604800 (7 days)
default TTL = 10800 (3 hours)
(root) ??? unknown type 41 ???
Server: UnKnown
Address: 127.0.0.1

Non-authoritative answer:
Name: whoami.akamai.net
Address: 67.215.80.70

Help, please?

rotblitz · ‎11-03-2017

Not sure what help you're looking for. What I can see from your command outputs is the following:

Fact is that your ISP prevents you from using 3rd party DNS services, not your router. You can circumvent this restriction by using DNSCrypt, as you successfully did, because DNSCrypt can use alternative ports and protocols, not being recognized as DNS traffic by your ISP.

You could use your PC where DNSCrypt runs on as DNS server for your whole network, then all devices will be using OpenDNS. Instead of listening on 127.0.0.1, you get DNSCrypt to listen on your PC's private external IP address, and you configure your other devices to use the PC's private external IP address as DNS server.

bayazidbh · ‎11-03-2017

Ah, bummer. It's exactly as I feared. Still, thanks for the solution though. I know there is a global resolver option in DNSCrypt but didn't know how to use it before. And it works with my phone, too. Thanks.