Page 1 of 1

blocking ouput dns request on ROs

Posted: Fri Dec 17, 2010 11:26 am
by st3ph4n3
Hello,

Sometimes, from /tool profil, I see dns taking up more cpu usage, and I often reach 100% CPU use.

My ROs dont plays as DNs resolver but as hotspot server, so why should it make output dns resolution ?

When I block output dns requests from Ros firewall, CPU usage becomes smaller and all work better...
Could this action avoid hotspot to still work well ?

thank You.

Re: blocking ouput dns request on ROs

Posted: Fri Dec 17, 2010 11:48 am
by Naderpour
when you use setup in /ip hotspot, the primary name server your clients receive from DHCP server is set to local IP address of hotspot, means all your clients DNS requests will be send to MikroTik first. you can change the DNS servers later in DHCP server configuration. but please note that if you remove MikroTik IP from primary name server in DHCP server config, your hotspot can not resolve the DNS name you used for your hotspot login page (setup adds an static A record for the name you use during setup) , you can change hotspot DNS name to IP address and it still works fine with IP. thats the way you can bypass using MikroTik DNS server and configure your clients to send DNS request directly to your ISP name servers.