Configuring MikroTik Router For DHCP And DNS Services

Yo, what's good fam? Today we're gonna talk about how to enable DNS over HTTPS (DoH) on your MikroTik router. This is some important stuff, so listen up.

MikroTik Router with DNS over HTTPS settings

First off, let's talk about what DNS over HTTPS actually is. Basically, it's a way to encrypt your DNS queries so that nobody can snoop on what websites you're visiting. If you're not using DoH, your ISP or whoever controls your network can see everything you're doing on the internet.

So let's get into it. Here's how to enable DNS over HTTPS on your MikroTik router:

Open up Winbox and connect to your router.
Go to IP > DNS.
Click on the "Settings" tab.
Check the box next to "Allow Remote Requests". This will allow clients on your network to make DNS requests through your router.
Click on the "Static" tab.
Add a new static DNS entry for 1.1.1.1 (Cloudflare's DNS service). You can also add entries for other DoH providers like Google (8.8.8.8) or Quad9 (9.9.9.9).
Now go back to the "Settings" tab and check the box next to "Use DNS Servers".
In the "DNS Servers" field, enter the IP address of the DoH provider you added in the previous step. In this case, it would be 1.1.1.1.
Click "Apply" and you're done! Your router is now using DNS over HTTPS.

Now, let's talk about why this is so important. Here are a few reasons:

1. Privacy: DNS queries are unencrypted by default, which means that anyone who can see your traffic (like your ISP or a hacker on the same network) can see which websites you're visiting. DoH encrypts your DNS queries so that nobody can snoop on them.
2. Security: When you use a regular DNS server, you're trusting the server to give you accurate information. However, DNS servers can be hijacked by attackers to redirect you to malicious websites. DoH servers (like Cloudflare's) are more secure because they use HTTPS to protect against man-in-the-middle attacks.
3. Censorship: DNS can be used to block access to certain websites (like in some countries with strict internet censorship). However, if you use a DoH provider, your requests are encrypted so it's harder for anyone to block your access.

So there you have it, fam. That's how to enable DNS over HTTPS on your MikroTik router. This is some important stuff to keep your browsing private and secure, so make sure you do it!

If you have any questions or thoughts, drop them in the comments below.