Skip to content

Instantly share code, notes, and snippets.

@pessom

pessom/doh

Forked from M0r13n/doh
Created December 24, 2024 12:12
Show Gist options
  • Save pessom/b9806cfef0d5bc6a2f982f40c7d4bbe9 to your computer and use it in GitHub Desktop.
Save pessom/b9806cfef0d5bc6a2f982f40c7d4bbe9 to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. @M0r13n M0r13n revised this gist Jul 4, 2021. 1 changed file with 8 additions and 1 deletion.
    9 changes: 8 additions & 1 deletion doh
    View file
    Original file line number Diff line number Diff line change
    @@ -14,4 +14,11 @@
    /ip dns set servers=""

    # Delete the certificate file
    /file remove cacert.pem
    /file remove cacert.pem

    # OPTIONAL - Disable DDNS
    /ip dhcp-client set use-peer-dns=no # Enter 0 as a number if it asks you
    # If you are connection over LTE (for exmaple with a chateau)
    /interface lte apn set use-peer-dns=no # Enter 0 as a number if it asks you
    # Verify, that DynDNS is disabled
    /ip dns print
  2. @M0r13n M0r13n created this gist Jul 4, 2021.
    17 changes: 17 additions & 0 deletions doh
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,17 @@
    # Temporarily add a normal upstream DNS resolver
    /ip dns set servers=1.1.1.1,1.0.0.1

    # CA certificates extracted from Mozilla
    /tool fetch url=https://curl.se/ca/cacert.pem

    # Import the downloaded ca-store (127 certificates)
    /certificate import file-name=cacert.pem passphrase=""

    # Set the DoH resolver to cloudflare
    /ip dns set use-doh-server=https://1.1.1.1/dns-query verify-doh-cert=yes

    # Remove the old upstream DNS resolvers
    /ip dns set servers=""

    # Delete the certificate file
    /file remove cacert.pem