howto/mikrotik.md
... ...
@@ -133,4 +133,17 @@ You want to advertise your allocated network (most likely), it's very simple:
133 133
/routing bgp network
134 134
add network=YOUR_ALLOCATED_SUBNET synchronize=no
135 135
```
136
-You can repeat that with as much IPv4 and IPv6 networks which you own.
... ...
\ No newline at end of file
0
+You can repeat that with as much IPv4 and IPv6 networks which you own.
1
+
2
+## Split DNS
3
+Separate dns requests for dn42 tld from your default dns traffic with L7 filter in Mikrotik.
4
+Change network and LAN GW to mach your network configuration.
5
+
6
+```
7
+/ip firewall layer7-protocol
8
+add name=DN42-DNS regexp="^(.*).dn42"
9
+/ip firewall nat
10
+add action=src-nat chain=srcnat comment="NAT to DN42 DNS" dst-address=172.23.0.53 dst-port=53 protocol=udp src-address=192.168.0.0/24 to-addresses=192.168.0.1
11
+add action=dst-nat chain=dstnat dst-address-type=local dst-port=53 layer7-protocol=DN42-DNS protocol=udp src-address=192.168.0.0/24 to-addresses=172.23.0.53 to-ports=53
12
+
13
+```
... ...
\ No newline at end of file