Just to update, the solution is working perfectly BUT it is quite CPU intensive
In an extreme scenario where I'm checking the logs every 1 second, the CPU usage sits at a constant 20%![:shock:]( "Shocked")
For a bit of background, I have setup DNS-over-HTTPs on my computer (not on the Mikrotik, I have my reasons) but this service tends to get switched off from time-to-time for unknown reasons. I added firewall rules to block all unencrypted DNS (which would route over port 53 on the UDP protocol), when this happens it gets written to the log. I have implemented the solution of this thread so that as soon as the log gets an item indicating that the DoH service has stopped and unencrypted DNS requests are trying to leave the network it starts beeping to notify me and I then go and restart the DoH service.
This way I never have unencrypted DNS leaving my network. It's all either encrypted and allowed through the router or blocked by the router (in which case I can't DNS until I fix it)
In an extreme scenario where I'm checking the logs every 1 second, the CPU usage sits at a constant 20%
For a bit of background, I have setup DNS-over-HTTPs on my computer (not on the Mikrotik, I have my reasons) but this service tends to get switched off from time-to-time for unknown reasons. I added firewall rules to block all unencrypted DNS (which would route over port 53 on the UDP protocol), when this happens it gets written to the log. I have implemented the solution of this thread so that as soon as the log gets an item indicating that the DoH service has stopped and unencrypted DNS requests are trying to leave the network it starts beeping to notify me and I then go and restart the DoH service.
This way I never have unencrypted DNS leaving my network. It's all either encrypted and allowed through the router or blocked by the router (in which case I can't DNS until I fix it)
Statistics: Posted by span — Wed Jan 24, 2024 9:18 pm