groove/mikrotik-scripts
1
0
Fork 0
mirror of https://github.com/pothi/mikrotik-scripts.git synced 2025-12-10 20:19:31 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Add alternative Cloudflare DoH script

Browse source
This commit is contained in:
Pothi Kalimuthu 2025-06-02 06:47:02 +05:30
parent 4d444a66bd
commit 60e720b7a5
No known key found for this signature in database
GPG key ID: 57069303D36E3093
4 changed files with 54 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

36
doh-scripts/cloudflare-one.one.one.one.rsc Normal file
View file

@ -0,0 +1,36 @@
# Verify the connection at https://1.1.1.1/help
# disable doh (temporarily)
/ip dns set verify-doh-cert=no
# update the caCertURL depending on what's used at https://1.1.1.1/dns-query
:local caCertURL https://cacerts.digicert.com/DigiCertGlobalRootG2.crt.pem
:local result [ /tool fetch url=$caCertURL dst-path=cert.pem as-value ];
:do { :delay 2s } while=( $result->"status" != "finished" )
/certificate remove [find name~"cert.pem"]
/certificate import file-name=cert.pem passphrase=""
# no longer needed for RouterOS v7
# /file remove cert.pem
# Add static DNS entries for the DoH server
/ip dns static remove [find name=one.one.one.one]
# use the following two entries only if IPv6 is available on your internet
# /ip dns static add address=2606:4700:4700::1111 name=one.one.one.one
# /ip dns static add address=2606:4700:4700::1001 name=one.one.one.one
/ip dns static add address=1.1.1.1 name=one.one.one.one
/ip dns static add address=1.0.0.1 name=one.one.one.one
/ip dns set use-doh-server=https://one.one.one.one/dns-query verify-doh-cert=yes
# optional steps
# use the following only if IPv6 is available on your internet
# /ip dns set servers="2606:4700:4700::1111,2606:4700:4700::1001,1.1.1.1,1.0.0.1"
/ip dns set servers="1.1.1.1,1.0.0.1"
/ip dhcp-client set use-peer-dns=no [find]
# flush existing cache
/ip dns cache flush