I need to be able to run this script.
iptables -t nat -A PREROUTING -p udp -i br0 --dport 53 -j DNAT --to $(nvram get lan_ipaddr)
iptables -t nat -A PREROUTING -p tcp -i br0 --dport 53 -j DNAT --to $(nvram get lan_ipaddr)
I can do it with DDWRT, but because I'm actually selling the router, I'm not convinced that its the most reliable firmware I can find.
Basically the script forces all port 53 traffic to a certain DNS address. Even if someone changes the DNS addresses on the computer.
|