Howdy Folks,

My question relates to 2 parts, 1 being app management firewall rules and DNS on the LAN .

I use nextdns as an upstream DNS filter, and have the LAN >> General Setup settings set to the nextdns servers.

I would like to have app management enabled on the Draytek to restrict usage on the LAN, but the firewall rules I have set don't seem to work unless I set the DNS server in the LAN >> General Setup settings to the IP of the Draytek, therefore using the ISP DNS servers.

My question is, do I need to have the DNS settings in the LAN >> General Setup set to the IP of the Draytek in order to have app management rules active? Because if so, this kills the ability to use upstream DNS filtering.

If I don't need to have the DNS server in LAN >> General Setup set to the IP of the Draytek, I cant work out why the app management in the firewall rules are not being enforced.

I'd appreciate any insight anyone may have regarding this.

dooley.