Child Item

Site Totals

61487 Questions Answered 271 Categories

Enabling DMZ Breaks DNS

When I enable DMZ in the router, the DNS server/relay stops working.

Verizon FiOS: 75/35
Firmware Version: 40.20.7
Model Name: MI424WR-GEN3I
Hardware Version: I

DMZ disabled:

>nslookup www.microsoft.com
Server: Wireless_Broadband_Router.home
Address: 192.168.1.1

Non-authoritative answer:
Name: lb1.www.ms.akadns.net
Address: 64.4.11.42
Aliases: www.microsoft.com
toggle.www.ms.akadns.net
g.www.ms.akadns.net

DMZ enabled: 192.168.1.24

>nslookup www.microsoft.com
Server: Wireless_Broadband_Router.home
Address: 192.168.1.1

DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
*** Request to Wireless_Broadband_Router.home timed-out

Totally reproducible, clear DMZ checkbox and save, and DNS works, check checkbox and save, and DNS stops working, repeat.

There is nothing interesting in the logs.

Any ideas?

Comments

dslr595148

#1 I saw your other thread about this issue.

At first you said a firmware upgade fixed the issue but then you changed your mind.

#2 While I know you have FIOS Internet, do you have FIOS TV?

#3 As addressed on https://www.grc.com/dns/spoof-faq.htm

..Very few small office home office (SOHO) routers make good DNS resolvers. Mostly they just get in the way and add no value whatsoever. They don't cache, they don't accelerate, they merely catch and forward DNS requests from inside the network to the public Internet. They're just in the way...

ptr7272

Yes, that is my thread:

http://www.dslreports.com/forum/r28472239-DMZ-Breaks-DNS

After the firmware udpate the router rebooted, than DNS worked, but soon died again.

So the firmware udpate did not resolve the problem

After every reboot DNS works a bit, and then dies.

I have triple play, interent, TV, and phone.

I am not concerned about the quality of the Verizon DNS servers, nor that the router is a simple forwarder, I jsut want it to always resolve DNS addresses, regardles of the DMZ configuration.

dslr595148

Ok.

#1 I saw in your DSLR profile that you are using Windows 2008 Server x64 as your DHCP and DNS Server.

Did you do that because you are trying to work around the issue OR you like that setup?

#2 Do you have a second RJ-45 WAN port router:

a) As a spare router?

b) That does not have this issue

ptr7272

I provided all pertinent information in this thread, sleuthing information from my public profiles on other forums is intersting, but not relevant 🙂

I am using the DNS server and DHCP server on the Verizon router.

Enabling DMZ on the Verizon router breaks DNS on the Verizon router.

That is what I would like to fix.

Child Item