Prevent devices from bypassing pihole (mikrotik)

Thanks to this guy for this awesome post: https://www.reddit.com/r/pihole/comments/5g249i/tip_redirect_all_dns_to_pihole_with_mikrotik/ Basically, you need to do this: Change 192.168.88.110 to your pi hole IP Change 192.168.88.0/24 to your subnet #Make sure all DNS goes to pihole IP address chain=dstnat action=dst-nat to-addresses=192.168.88.110 protocol=udp src-address=!192.168.88.110 dst-address=!192.168.88.110 dst-port=53 chain=dstnat action=dst-nat to-addresses=192.168.88.110 protocol=tcp src-address=!192.168.88.110 dst-address=!192.168.1.2 dst-port=53 Read more…