Question: Block internal DNS #1115

Open
opened 2025-11-20 05:24:18 -05:00 by saavagebueno · 3 comments
Owner

Originally created by @sahara101 on GitHub (Jul 31, 2024).

Hello!

I have an exit node defined. Is there a way to use it only for the internet traffic and block the LAN access to it? I tried with an access control where I blocked my DNS IP, 192.168.1.172/32, but it still works. My iPhone and the exit node are both in a group called exit. I added DNS for it as 8.8.8.8.
Thanks!

Originally created by @sahara101 on GitHub (Jul 31, 2024). Hello! I have an exit node defined. Is there a way to use it only for the internet traffic and block the LAN access to it? I tried with an access control where I blocked my DNS IP, 192.168.1.172/32, but it still works. My iPhone and the exit node are both in a group called exit. I added DNS for it as 8.8.8.8. Thanks!
saavagebueno added the feature-requestquestionsecurityroutesnetworking labels 2025-11-20 05:24:18 -05:00
Author
Owner

@lixmal commented on GitHub (Aug 1, 2024):

Currently, there's nothing built-in, but you could add custom iptables/nftables rules to block traffic from the netbird interface that targets any of your LAN networks

@lixmal commented on GitHub (Aug 1, 2024): Currently, there's nothing built-in, but you could add custom iptables/nftables rules to block traffic from the netbird interface that targets any of your LAN networks
Author
Owner

@sahara101 commented on GitHub (Aug 3, 2024):

Thank you

@sahara101 commented on GitHub (Aug 3, 2024): Thank you
Author
Owner

@yaneony commented on GitHub (Oct 19, 2025):

There is a problem with that:
https://github.com/netbirdio/netbird/issues/3668

@yaneony commented on GitHub (Oct 19, 2025): There is a problem with that: https://github.com/netbirdio/netbird/issues/3668
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SVI/netbird#1115