topic Re: VPNs and Port 53 in Archived Posts

VPNs and Port 53

mobicycle — Sun, 18 Apr 2021 16:04:03 GMT

A VPN provider, Cyberghost, told me in their customer support that EE is blocking port 53 on my wifi router.

Are they correct?

https://www.cyberghostvpn.com/en_US/support/articles/360015581760-How-to-disable-Port-53

Sometimes, port 53 (DNS) may be blocked by your ISP and this will interfere with the Smart DNS service.

How to unblock port TCP/UDP 53 ?

It is worth mentioning that in some situations Smart DNS cannot be used successfully. If your Internet Service Provider diverts the DNS while using a technology called 'Transparent DNS proxy', they intercept all DNS lookup queries (TCP/UDP port 53) and transparently proxy the results. This forces you to use their DNS addresses without being able to change them. Smart DNS might have issues.

In other cases, port 53 (DNS) may be intentionally blocked.

In such a situation, we recommend that you submit a request for unblocking to your ISP's technical support department.

Re: VPNs and Port 53

mobicycle — Sun, 18 Apr 2021 16:10:57 GMT

STEPS TAKEN

On my device, I go to Settings > Network > Wi-Fi

I select my Wi-Fi connection (or wired connection if I am connected via Ethernet)

I select Configure DNS

I update the configuration from Automatic to Manual

I input the DNS server IP for my chosen region (The IP was provided by my VPN)

I select Done

I restart my device to apply the changes

In theory, I should now be able to access content from my chosen location

Re: VPNs and Port 53

mobicycle — Sun, 18 Apr 2021 16:17:53 GMT

I just noticed this post from 2018 - "Change DNS on Smart Hub" https://community.ee.co.uk/t5/Broadband-home-phone/Change-DNS-on-Smart-Hub/td-p/724056 "‎05-10-2018 10:51 AM - I have a simple problem: I cannot seem to change the DNS servers that the Smart Hub uses. Has anyone done this? The 'Advanced' settings are pretty poor, to be honest." I am not sure how this answer relates to my question.

Re: VPNs and Port 53

XRaySpeX — Sun, 18 Apr 2021 16:51:30 GMT

I presume that you are looking at a mobile router, not the fixed BB Smart Hub. So you won't necessarily have the same functionality. If you can't set the DNS manually on your router then there is nowt you can do to override the mobile network's own DNS.

However you may often set your own DNS settings on the devices connected to the router, particularly PCs.

Re: VPNs and Port 53

mobicycle — Sun, 18 Apr 2021 16:54:19 GMT

4GEE Router Advanced Settings Configure WAN Mac clone LAN WAN ping IP filter MAC filter DMZ ALG UPnP NTP Server Virtual Server QoS Parental Control

Re: VPNs and Port 53

mobicycle — Sun, 18 Apr 2021 16:56:16 GMT

LAN settings Gateway address: Subnet mask DHCP server: Start IP address: End IP address: DHCP lease time: Hours ApplyCancel

Re: VPNs and Port 53

XRaySpeX — Sun, 18 Apr 2021 17:04:32 GMT

What's the DHCP got to do with DNS? The DNS settings, if present, will be on the WAN side.

Re: VPNs and Port 53

mobicycle — Sun, 18 Apr 2021 17:58:37 GMT

Why would I want to override how IPs are automatically assigned within my network?

DNS

maps the domain name to IP address

DHCP

is a protocol which assigns IP to the hosts in a network be it statically or dynamically
configures hosts automatically
contains two components i.e., a protocol and mechanism

Re: VPNs and Port 53

XRaySpeX — Sun, 18 Apr 2021 18:14:45 GMT

I dunno! Why would you? I thought your enquiry was about DNS.

Do you really think I need telling what they are?

Re: VPNs and Port 53

mobicycle — Sun, 18 Apr 2021 18:16:52 GMT

"Do you really think I need telling what they are?" I dunno.

My goal is to find a way to update the DNS that allows me to access geo-restricted content. If, given EE's setup, that means updating the DHCP, I am willing to do so.

Re: VPNs and Port 53

mobicycle — Sun, 18 Apr 2021 18:21:41 GMT

In another related post from 2012, "BT Blocking Port 53 (DNS)?"
https://community.bt.com/t5/Archive-Staging/BT-Blocking-Port-53-DNS/td-p/605410

"I found out that the TCP 53 is open, but UDP 53 seemed to be blocked by BT."

Re: VPNs and Port 53

mobicycle — Sun, 18 Apr 2021 18:40:41 GMT

Netcat (or nc) is a command-line tool that can read and write data across network connections, using the TCP or UDP protocols. With netcat you can scan a single port or a port range. For example to scan for open TCP ports on a remote machine with IP address 10.10.8.8 in the range 20-80 you would use the following command:

nc -z -v 10.10.8.8 20-80

I used nc -z -v 192.168.1.1 53

Connection to 192.168.1.1 port 53 [tcp/domain] succeeded!

To scan for UDP ports pass the -u option to the nc command.

Connection to 192.168.1.1 port 53 [udp/domain] succeeded!

Reference - https://linuxize.com/post/check-open-ports-linux/

Re: VPNs and Port 53

XRaySpeX — Sun, 18 Apr 2021 18:54:17 GMT

EE blocks no outgoing ports. All Firewalls block all incoming ports unless you explicitly open them. In which direction is that port said to be blocked?

Re: VPNs and Port 53

mobicycle — Sun, 18 Apr 2021 18:47:46 GMT

Cyberghost didn't give any details. They just said that if their VPN isn't working, it must be EE's fault. They said my configuration was correct, therefore that was sufficient proof for them that the problem is on EE's side.

Here is their response,

We can totally understand where you are coming from. However, what we can advise is to really contact your Internet provider to consult about having the Port 53 to be enabled. The Smart DNS feature will never function if the said port is not enabled.

Cyberghost support:

Yes however seeing here, The configuration was correct. however the Internet serveice provider may have the settings that might interfere the Smart DNS service.
Alright, Seeing here, The configuration was done correctly.There's a proof and it was prompt on your Smart DNS Dashboard.
To use the Smart DNS service the port 53 should be unblock so you can use our Smart DNS service.
however some internet service provider, the port 53 is blocked and you need to contact them to unblock it.
We are trying our best to assist you further with your concern. We analyze and it was proven that you need to contact your Internet service provider.
The prompt on your Smart DNS dashboard about the port 53 was initially prompt once you activate your Smart DNS.
Seeing here, You need to coordinate your Interner service provider for unblocking the Port 53.

Re: VPNs and Port 53

XRaySpeX — Sun, 18 Apr 2021 19:11:10 GMT

I've already told you:

The DHCP has nowt to do with DNS.
If the router has no settings for switching DNS, then you can't do it.

I try to answer your queries but all you seem to back with are non-sequiturs.

Re: VPNs and Port 53

mobicycle — Sun, 18 Apr 2021 18:55:00 GMT

I seek answers from people who can deliver their advice without an antagonistic tone.

At the end of the day, I have options. I can ask for a refund from my VPN provider, or switch to another ISP.

I am not so desperate for a solution that I am willing to be the target of someone who is emotional and unhappy.

Let's avoid escalating this chat. It's unnecessary. After all, we are all here to resolve issues and learn.

To be clear, I would prefer for this chat to end here than engage further with you @XRaySpeX

EE moderators, are you listening??? I hope so.

Should someone else want to weigh in, that sounds good to me. Otherwise, let's close this ticket.

Re: VPNs and Port 53

XRaySpeX — Sun, 18 Apr 2021 18:58:41 GMT

Where is this Smart DNS running? Is it on a device on your LAN awaiting unsolicited access from your VPN site? It sounds like it could be a Dynamic DNS (DDNS).

Re: VPNs and Port 53

XRaySpeX — Mon, 19 Apr 2021 00:26:18 GMT

@mobicycle : In the lack of any response I shall assume that it is.

In which case your real solution lies in the Virtual Server function, on the page you posted in post 5, to open port 53 inbound to unsolicited remote access.