How to secure DNS and NTP on DD-WRT for AR300M NAND?

Henry_Bruns · 2018-04-27T22:21:39.789Z

Its looks like the GL.iNet Open WRT Image for AR300M NAND, dont provide secured DNS and NTP. Thats should add urgendly on Firmware.

The result is, the DNS are not crypted and can read and modified by every one on the way between user and server on internet. Ok, some people will mean, what to the hell is importand the NTP.

You can check easy what will happen if you chnage the time on your pc pe. two years in future and after than try to access a https website or tra to use a VPN connection. You will see, all certificate based funktions will stopp to work. Thats why NTP should secured too.

How to fix this by normal user on GL.iNet Open WRT Image for AR300M NAND ?

kyson-lok · 2018-04-28T17:20:43.107Z

Here is guide to dns over tls on gl’s device.

Henry_Bruns · 2018-04-29T11:37:55.552Z

THX for the guide. A its looks like this is possible primary for programmer, not for normal user of gl.iNet router.

I will be happy to use this on my 3 GL router by webinterface. One of my friends with one GL router, mean the same.

VBR

kyson-lok · 2018-04-29T15:52:16.905Z

But now it doesn’t support on GL’s webinterface. We will add DNS crypted in the future.

Henry_Bruns · 2018-05-05T11:26:50.332Z

Thanks for your answer. Secured DNS and NTP, able to configure by webinterface by normal customer, will be a great future.

VBR

Henry_Bruns · 2018-05-28T10:09:26.142Z

If its more easy to provide DNS over TLS, that will be much better than not secured DNS like on this time. See the follow description for activate DNS over TLS on Open WRT gl-inet devices. https://blog.cloudflare.com/dns-over-tls-for-openwrt/

A integration of DNS over TLS for non programmer will be great and secure the DNS of gl-inet user.

VBR