OpenDNS via VPN CHR

di chr servers
/ip dns set servers=208.67.222.222,208.67.220.220 allow-remote-requests=yes
/ip firewall nat
add chain=dstnat action=dst-nat to-addresses=192.168.10.1 to-ports=53 protocol=tcp dst-port=53
add chain=dstnat action=dst-nat to-addresses=192.168.10.1 to-ports=53 protocol=udp dst-port=53

di klien
/int sstp-client add name=userman connect-to=ipCHR user=RB951Ui-2HnD password=RB951Ui-2HnD add-default-route=no disabled=no comment=OpenDNS&Userman
/ip fi fi add chain=input src-address-list=!private-lokal protocol=udp dst-port=53 action=drop comment=OpenDNS
/ip fi fi move [find comment=OpenDNS] 0
/ip fi na add chain=dstnat src-address-list=private-lokal protocol=udp dst-port=53 action=redirect to-ports=53 comment=OpenDNS
/ip fi na add chain=srcnat action=masquerade out-interface=userman comment=OpenDNS
/ip fi na move [find comment=OpenDNS] 0
/ip ro add gateway=192.168.10.1 routing-mark=OpenDNS comment=OpenDNS
/ip rou rule add action=lookup table=OpenDNS dst-address=208.67.222.222 comment=OpenDNS
/ip rou rule add action=lookup table=OpenDNS dst-address=208.67.220.220 comment=OpenDNS
/ip dns set servers=208.67.222.222,208.67.220.220 allow-remote-requests=yes


buat ngapus

/ip fi add rem [find comment=OpenDNS]
/ip fi fi rem [find comment=OpenDNS]
/ip fi na rem [find comment=OpenDNS]
/ip ro rem [find comment=OpenDNS]
/ip rou rule rem [find comment=OpenDNS]
/ip dns set servers=208.67.222.222,208.67.220.220 allow-remote-requests=yes