General Questions

Hello all i am using 1.3

My question is how do i make all the PC's entering the Captive Portal (OPT1) use the OpenDNS ip's and any PC on the LAN go to another DNS (example the ISP's DNS). I want to filter the OPT1 traffic with OpenDNS and want the traffic on the LAN unfiltered

Any Ideas??

Thanks

As far as I know, there is no way to do this. Once you set the DNS servers that m0n0wall uses, it applies to all interfaces (OPT1, LAN, etc.)

you would have to manually edit the dhcpd server config to give a different DNS server out of the OPT interface, and these changes would be lost on reboot or when you reconfigure dhcp server

Currently m0n0wall's dhcp tells clients to use the dns forwarder built into m0n0wall.

Thanks for the reply

Hope to see this changes in future releases of m0n0wall

Thanks

You can hand out DNS server IPs when you hand out an IP address, but this is merely an offer. They can specify or even run their own resolvers, unless you also block DNS traffic to all but acceptable (to you) DNS servers.

Good Point

You can accomplish this with one of the hidden config.xml options.
  http://doc.m0n0.ch/handbook/faq-hiddenopts.html

Quoting from the FAQ:
Some m0n0wall options are only accessible by modifying config.xml directly.This is usually the case for strange/exotic options that only few people (should) use.

To put in these options, download your config.xml via the backup feature and open it in a text editor. Put in the desired options in the appropriate location in the file, as shown in the default config.xml linked above. After saving your desired changes, use the restore feature in m0n0wall to restore the changed configuration.

The option you want is the following:

dhcpd/(if)/dnsserver
Assigns custom DNS servers to DHCP clients (instead of m0n0wall's IP address if the DNS forwarder is enabled, or the DNS servers configured on System: General setup otherwise)

With this option, you should be able to set different DNS servers for each different interface (LAN, OPT1, OPT2, etc.)


There are also two other hidden DHCP options that may be of interest:

dhcpd/(if)/gateway
Allows you to specify a custom gateway to assign to DHCP clients (instead of m0n0wall's IP address on the corresponding interface)

dhcpd/(if)/domain
Assigns a custom domain name to DHCP clients (instead of the one configured on System: General setup)

-msbaker

Interesting can you possibly provide me with an example XML.

I can's quite figure it out

Thanks

you will see something like this in your config.xml

<dhcpd>
        <lan>
            <range>
                <from>192.168.x.100</from>
                <to>192.168.x.199</to>
            </range>
        </lan>
 </dhcpd>

 so insert

<dnsserver>8.8.8.8</dnsserver>

before </lan>

I will give it a go thanks