Why Sunrise is blocking Custom DNS Server?

rohit · 2024-05-06T15:56:21+00:00

I use AdGuardHome for my home network and like to use Custom DNS servers. I recently noticed, only Google Public DNS 8.8.8.8 works as expected and everything else is blocked at ISP level. Cloudflare DNS debugging page clearly shows the problem at https://1.0.0.1/help. Connection to 1.1.1.1 is possible but DNS resolution at port 53 does not work. Linux commands `dig` and `nc` clearly shows the problem. Google DNS `8.8.8.8` works, but all other DNS server fails. **With sunrise internet, only Google DNS `8.8.8.8` works:** ``` $ nc -zv 8.8.8.8 53 Connection to 8.8.8.8 port 53 [tcp/domain] succeeded! $ nc -zv 1.1.1.1 53 nc: connectx to 1.1.1.1 port 53 (tcp) failed: Operation timed out $ ``` **With VPN, everything works:** ``` $ nc -zv 8.8.8.8 53 Connection to 8.8.8.8 port 53 [tcp/domain] succeeded! $ nc -zv 1.1.1.1 53 Connection to 1.1.1.1 port 53 [tcp/domain] succeeded! $ nc -zv 1.1.1.1 53 ``` I have not changed any firewall settings on the router. Also, the Sunrise surf protect option is disabled for my account. **So, this clearly looks like some traffic blocking at ISP level.** **Router Static DNS setting***:* I see, that setting Static DNS is disabled on the Sunrise box. I understand, that an ISP might want to keep a safe default and restrict a few settings in the router. Advanced users can still configure custom DNS settings on their devices. **But why block custom DNS server traffic?** I am also unable to use `DNS-over-HTTPS` or `DNS-over-TLS`. Only requests to `8.8.8.8:53` seems to be working. **Is Encrypted DNS also blocked?**

rohit

Hi Daniele

Thanks for the update. The problem is not yet solved.

Example: DNS resolution with 1.1.1.1 still fails:

$ dig @1.1.1.1 google.com

; <<>> DiG 9.16.48-Ubuntu <<>> @1.1.1.1 google.com
; (1 server found)
;; global options: +cmd
;; connection timed out; no servers could be reached

$ ping -c 2 1.1.1.1
PING 1.1.1.1 (1.1.1.1) 56(84) bytes of data.
64 bytes from 1.1.1.1: icmp_seq=1 ttl=57 time=4.92 ms
64 bytes from 1.1.1.1: icmp_seq=2 ttl=57 time=4.21 ms

--- 1.1.1.1 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1001ms
rtt min/avg/max/mdev = 4.208/4.563/4.918/0.355 ms

But the command succeeds, if I use 8.8.8.8.

Regards

Rohit

jan4321

I have the same problem. Could you active for my modem as well?

Daniele_Sunrise

jan4321 Welcome to the community!

Please send us your customer number, address and date of birth via private message for processing. We will then be happy to check the configuration of your modem.

Greetings
Daniele

abde2

I’ve just sent my data via a private message as well to activate custom DNS Server. Thanks.

Daniele_Sunrise

abde2 We have made the switch to IPv4, which will be completed in a few minutes.

Greetings
Daniele

abde2

@Dani_B Thanks. Not sure how switching to IPv4 enables Static DNS config. Can you explain? I see that Static DNS option is still disabled in my UI. Can you enable it please?

Daniele_Sunrise

abde2 Unfortunately, I can’t guide you through the settings as I don’t have any instructions. I would deactivate everything that is IPv6 and then test it again.

Greetings
Daniele

Lilwolf

abde2 Did you ever find a solution to your problem ? I had to change boxes to the older one, which only supports 1 Gbits because the static toggle was also greyed out. I also use a custom DNS server at home (pihole). Thanks for your reply !

abde2

@Lila unfortunately I didn’t find out. I’m relatively tech savvy due to my job, but I didn’t manage to find a solution. Static DNS remained disabled in my UI. Not sure why Sunrise doesn’t allow changing it easily, I hoped @Daniele_Sunrise would know. I’m thinking of buying my own router at this point.

Daniele_Sunrise

abde2 Can you deactivate this function?

Greetings
Daniele

Lilwolf

abde2 that was my next question. Can you set your modem/router in bridge mode ? That’s my hope so that you can buy another router and set your own config

Henrymote

It would be good to internally report that local dns change should be made editable by advanced users for the next Sunrise router…In fact it was possible by default on Zyxel firmware but customized by Sunrise to remove that option…Not a good move for advanced users.