<![CDATA[Disallow dns tunnel]]>Hello,

i'm using captive portal over wireless with a WRAP board. now i recognize that some nice people using a dns tunnel with my AP. who to protect against this?
i only allow ports 80, 443 and email. but i have also to activate dns 53 to make dns resolving working. is it possible to use a dns server on the box and to disable the txt records?

Martin

]]>https://forum.netgate.com/topic/1180/disallow-dns-tunnelRSS for NodeMon, 12 Oct 2026 06:04:04 GMTMon, 22 May 2006 05:45:17 GMT60<![CDATA[Reply to Disallow dns tunnel on Sun, 28 May 2006 14:29:45 GMT]]>Unless you have reason to believe this is really a DNS tunnel, my bet is that they've just configured OpenVPN to use port 53.  Blocking DNS to servers not under your control should fix the problem.

–Bill

]]>https://forum.netgate.com/post/137441https://forum.netgate.com/post/137441Sun, 28 May 2006 14:29:45 GMT<![CDATA[Reply to Disallow dns tunnel on Mon, 22 May 2006 10:02:44 GMT]]>I'm not sure but it's worth a try.

]]>https://forum.netgate.com/post/137225https://forum.netgate.com/post/137225Mon, 22 May 2006 10:02:44 GMT<![CDATA[Reply to Disallow dns tunnel on Mon, 22 May 2006 07:06:40 GMT]]>Hi hoba,

i have to check if the dns forwarder of pfsense forwards the dns dunnel. at the moment i allow all dns traffic.
hm do you think the forwarder can for example block txt records?

Martin

]]>https://forum.netgate.com/post/137223https://forum.netgate.com/post/137223Mon, 22 May 2006 07:06:40 GMT<![CDATA[Reply to Disallow dns tunnel on Mon, 22 May 2006 07:02:44 GMT]]>Does it make a difference if you only allow DNS to the IP of the pfSense or is the forwarder even forwarding the tunnel traffic?

]]>https://forum.netgate.com/post/137222https://forum.netgate.com/post/137222Mon, 22 May 2006 07:02:44 GMT