Flow Preferences and DNS Filter Mode and https

Products Security & SD-WAN
1

Hello, gentlemen.

I recently purchased my NSE3000 device, and for now, I have these questions:

DNS Filter Mode

How can I add my list of domains and/or custom pages that I want to block? Is there a manual? Is there a step-by-step guide for this?

Flow Preferences

I have two broadband internet services connected to WAN1 and WAN2.

I have created two flow control rules. I have set two computers on my local network, with their respective fixed private IP addresses, to exit through WAN2.

Additionally, I have instructed the flow control to allow all WhatsApp traffic to exit through WAN1.

When I run the rules on the computers I configured for WAN2, they are no longer able to access WhatsApp. :slightly_frowning_face:

Is there a way to create these two rules so that they do not affect the WhatsApp service?

:face_with_monocle:

2

Hi micampo

Take a look at this video for more information on DNS filtering. The instructions on adding your custom domains start around timestamp 3:14 . You can’t block custom pages though.

On your question about flow preferences, could you please share a screenshot of the flow control rules you’ve added?

1 Like
3

Hello

Yes, not being able to block custom pages seems very bad and sad to me.

Regarding flow control, it already worked for me.

imagen
imagen1097×161 13.6 KB

thank you
4

I’ve already seen the video and the procedure is exactly the same as the one I use on my BIND DNS server… do you agree?

5

Now I’m having a problem:

I have both WANs enabled and have enabled the 50/50 traffic sharing ratio.

But some HTTPS pages are closing and telling me the IP has changed.

6

Yes, if you’re using that procedure to block additional domains it will work.

>But some HTTPS pages are closing and telling me the IP has changed.

Are there some sites which consistently fail? If so could you please share the URL so we can try to replicate that?

7

I haven’t retested it yet. When I have the device connected again, I’ll let you know what I’ve done and attach images.

For now, I’m asking:

Is there a way to enter a list of 40,000 domains that I should block? Or a custom link, for example: https://github.com/domains.txt?

8

Unfortunately no. The local DNS entries is meant for a relatively small number of manually entered values.

9

I regret having bought the equipment. That was one of the specific needs we needed to address.

How sad