For this issue, i use command as below
CODE
/ip firewall filter
add action=drop chain=input comment="DROP EXT DNS" dst-port=53 in-interface=\
!LAN log=yes protocol=udp
add action=drop chain=input comment="DROP EXT DNS" dst-port=53 in-interface=\
!LAN log=yes protocol=udp
Basically it will drop all DNS request except from LAN
This post has been edited by royal_jelly: Feb 4 2016, 12:56 AM
Feb 4 2016, 12:54 AM
Quote
0.0152sec
0.51
6 queries
GZIP Disabled