Community discussions

MikroTik App
 
Jahir
just joined
Topic Author
Posts: 16
Joined: Mon Dec 18, 2017 9:26 am
Location: Dhaka, Bangladesh

DNS issue

Thu Sep 20, 2018 2:23 am

My DNS configuration:
ip dns print
servers: 118.179.223.10,202.4.96.6,8.8.8.8
dynamic-servers:
allow-remote-requests: no
max-udp-packet-size: 4096
query-server-timeout: 2s
query-total-timeout: 10s
max-concurrent-queries: 100
max-concurrent-tcp-sessions: 20
cache-size: 2048KiB
cache-max-ttl: 1w
cache-used: 23KiB

I've tried to ping in google.com. But unable to get ping response. How can I fixed it.
ping google.com
invalid value for argument address:
invalid value of mac-address, mac address required
invalid value for argument ipv6-address
while resolving ip-address: could not get answer from dns server
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 12645
Joined: Thu Mar 03, 2016 10:23 pm

Re: DNS issue

Thu Sep 20, 2018 7:29 am

Can you ping any of IPs you entered as upstream DNS servers? Check FW rules for chains output and input ... input should accept at least established and related connections ....
 
Bobstonom
just joined
Posts: 6
Joined: Tue Sep 11, 2018 6:17 pm
Location: Tampa, Florida

Re: DNS issue

Thu Sep 20, 2018 2:26 pm

Hello, Jahir! How is it now?
 
Jahir
just joined
Topic Author
Posts: 16
Joined: Mon Dec 18, 2017 9:26 am
Location: Dhaka, Bangladesh

Re: DNS issue

Thu Sep 20, 2018 3:42 pm

I've ping entered upstream DNS servers but same problem can't get ping response. This router have two filter rules. I've clear log registry but there are no progress..
Flags: X - disabled, I - invalid, D - dynamic
0 chain=input action=accept src-address-list=Allow log=no log-prefix=""

1 chain=input action=drop log=no log-prefix=""

2 X chain=input action=drop protocol=tcp dst-port=53 log=no log-prefix=""

3 X chain=input action=drop protocol=udp dst-port=53 log=no log-prefix=""
 
Sob
Forum Guru
Forum Guru
Posts: 9188
Joined: Mon Apr 20, 2009 9:11 pm

Re: DNS issue

Thu Sep 20, 2018 5:08 pm

Add this as the first rule:
/ip firewall filter
add chain=input connection-state=established,related action=accept
It will allow to receive replies.
 
Jahir
just joined
Topic Author
Posts: 16
Joined: Mon Dec 18, 2017 9:26 am
Location: Dhaka, Bangladesh

Re: DNS issue

Thu Sep 20, 2018 10:10 pm

Thanks a lot it's working.

Who is online

Users browsing this forum: mkx, RogerWilco and 24 guests