B-One: WiFi: Blocking Encrypted DNS Traffic

[dangrimes]

I have a new Peplink B-One with mainly default settings that will not allow most traffic, especially websites, through its built in WiFi. However, sometimes it works and used to work fine but now mostly not.

The iPhone reports “The network is blocking encrypted DNS traffic.”

I don’t see any settings to block encrypted DNS traffic.

In fact, I did have “DNS over HTTPS” enabled and pointed it to NextDNS service. I disabled DNS over HTTPS to troubleshoot but still get the same error.

Starlink is the main WAN connection and the Starlink menu has it enabled. The wired connections are working fine.

[dangrimes]

I did find two other topics on this subject relating to DNS issues:

Seeking diagnostic strategy for single device that may be blocked from internet by new B One router

Interesting findings, and thanks for explaining your method as well. The final result where you have 3 DNS IP addresses listed for the laptop may not be doing what you think: with multiple DNS Servers, the MacBook will try one, but if it fails, it will try the next, then the next. so even if the Peplink Router DNS (10.66.1.19) is failing, it will try the other two. I believe that these will be normal (non-encrypted, TCP port 53) DNS requests, not DNS over HTTPS. So, while the MacBook is work…

B-ONE "Connected but No Internet" (Ping works, Browsing fails) – Fix for DoH and Time Sync Issues

Thanks for documenting this — the “connected but no internet” symptom (where pings work but browsing fails) can be really confusing, and for a lot of us it’s reassuring to see common patterns like DoH and time‑sync issues crop up. A few additional things that often help when you’re troubleshooting like this: Double‑check DNS behavior: If DoH (DNS over HTTPS) ends up forced through a route that the Peplink can’t reach, clients will appear connected (ping works by IP) but name resolution fails —…

Both of these discuss issues with DNS over HTTPS. I went ahead and made some of the recommended adjustments such as setting the Time Server. But in the end, I turned off DoH and the iPhone was still not able to reach the internet.

I changed the WAN from Starlink to CenturyLink and the warning on the iPhone,that the network is blocking encrypted DNS traffic, persisted. So I do not believe this is an ISP issue.

I still have not found any settings in the B-One that relates to blocking encrypted DNS.

Do you think I need to factor reset this router and start over?

[dangrimes]

More Troubleshooting:

I have access to two other WiFi networks in my house. The first is a CenturyLink router (a service I hope to replace) and the WiFi router on the Starlink system. The iPhone does not have a problem with either of those WiFi networks. The iPhone does not give the error/warning. It persists with the Peplink router.

Therefore, I think the issue is with the Peplink B-One. I wonder why the router would be blocking the DNS communication.