mirror.MikroTik/pothi.mikrotik-scripts
1
0
Fork 0
mirror of https://github.com/pothi/mikrotik-scripts.git synced 2025-07-12 15:44:28 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

Split ntp-client script for ROS v6 and v7; add mullvad family DoH script

Browse source
This commit is contained in:
Pothi Kalimuthu 2024-11-29 20:13:34 +05:30
parent a7a9e164ed
commit dc9c619851
No known key found for this signature in database
GPG key ID: 57069303D36E3093
3 changed files with 102 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

44
doh-scripts/mullvad-family.rsc Normal file
View file

@ -0,0 +1,44 @@
# Mullvad requires HTTP2 that is not supported by MikroTik, yet!
# TODO: Verify the connection if possible
# Ref: https://mullvad.net/en/help/dns-over-https-and-dns-over-tls
# disable doh (temporarily)
/ip dns set verify-doh-cert=no
# Mullvad uses LetsEncrypt certs that in turn uses ISRG Root X1 as of Nov 2024
:local result [ /tool fetch url=https://letsencrypt.org/certs/isrgrootx1.pem dst-path=mullvad-x1.pem as-value ];
:do { :delay 2s } while=( $result->"status" != "finished" )
# Let's prepare for the transition (to ISRG Root X2), though; ref: https://letsencrypt.org/certificates/
:local result [ /tool fetch url=https://letsencrypt.org/certs/isrg-root-x2.pem dst-path=mullvad-x2.pem as-value ];
:do { :delay 2s } while=( $result->"status" != "finished" )
/certificate remove [find name~"mullvad-x1.pem"]
/certificate remove [find name~"mullvad-x2.pem"]
/certificate import file-name=mullvad-x1.pem passphrase=""
/certificate import file-name=mullvad-x2.pem passphrase=""
/file remove mullvad-x1.pem
/file remove mullvad-x2.pem
/ip dns
static remove [find name="family.dns.mullvad.net"]
static add name=family.dns.mullvad.net address=194.242.2.6 comment="mullvad IPv4"
# static add name=family.dns.mullvad.net address=149.112.112.112 comment="mullvad IPv4 - secondary"
static add name=family.dns.mullvad.net address=2a07:e340::6 comment="mullvad IPv6"
# static add name=family.dns.mullvad.net address=2620:fe::fe comment="mullvad IPv6 - secondary"
set use-doh-server=https://family.dns.mullvad.net/dns-query verify-doh-cert=yes
# optional steps
/ip dns set servers="2a07:e340::6,194.242.2.6"
/ip dhcp-client set use-peer-dns=no [find]
# flush existing cache
/ip dns cache flush
# Post-install step: remove this file manually
# /file remove mullvad.rsc