TP-Link blocking google DNS - Help please

[Salt]

Hi all,

I need some help please. I am going in to fibre soon so have the following challenge. I stream local Netflix and US Hulu (for those that don't know Hulu is like Netflix but only based in the US - thus the smart DNS service). The Hulu I stream using my Chromecast. I use a smart DNS service for Hulu but I need to block google DNS (8.8.8.8 and 8.8.4.4) requests from the Chromecast otherwise it blocks me based on geographic location - the google DNS overrides the smart DNS. So currently I have a TP-Link wireless router and a Huawei LTE router. I use the TP-Link for DHCP which also hands out the smart DNS service DNS IP's, I also reserve the IP address for the Chromecast here (192.168.1.52). On the Huawei I use the LAN IP Filter feature to block all traffic from the Chromecast to 8.8.8.8 and 8.8.4.4 - see attached.

On the TP-Link I created a firewall set up to try do the same. There is a firewall rule made up of a LAN and WAN rule (all attached). The LAN rule simply says 192.168.1.52 on all ports. The WAN rule simply says 8.8.8.8 and 8.8.4.4 all ports. The firewall rule then uses the LAN and WAN rule and blocks all traffic always between the LAN and WAN rule. But when I do this it doesn't work - I get the geographic error from Hulu.

On the net various sites advise to create a static route (attached) but this will then block traffic from all my LAN IP's to google DNS which will then give me US netflix which I don't want cause the US Netflix guys constantly change their network config to do geo blocking. So I am OK with local Netflix...the Hulu guys don't constantly do geo blocking.

I wana replicate the same set up I have on the Huawei...only block google DNS from the Chromecast. Can anyone assist me? Not sure why my firewall set up does not work? On the Huawei I also block all ports so I don't think I should only block port 53.

Any help please? When the fibre goes live this week the Huawei router will be replaced then I am screwed.

Thanks,

 

[ThatOtherDude]

try this:

delete ALL rules & static routes.
switch off routers.
switch on routers. (to flush cache)


Keep it simple:
ONLY reroute Google DNS traffic. (on your internet-faing link - the LTE router in your case?)



2 new rules:

destination: 8.8.8.8
subnet: 255.255.255.255
gateway ip-address-of-your-smartdns-server

destination: 8.8.4.4
subnet: 255.255.255.255
gateway: ip-address-of-your-smartdns-server


save
switch off router.
switch on router.


This will cause Chromecast to send its DNS requests to Google - but they'll get rerouted to your Smart DNS.



2nd issue:
If you stream Netflix from a PC like I do then just make sure you DON'T use Google DNS on the PC.

Add static IP details on the PC.
I use DNS 1.1.1.1 (apparently it's faster than Google)

meh.

You'd want to use a SA DNS - any one of many from the list below?

https://public-dns.info/nameserver/za.html