CIRA Canadian Shield on Firewalla Gold

I am trying to configure my Firewalla Gold with custom DNS over Https servers to make use of the new Canadian Shield service. I've tried configuring both DNS and IP addresses and when I shutdown the other DoH servers (CloudFlair, Google, OpenDNS, and Quad9) I can no longer resolve addresses.

With standard DNS still pointing to Google 8.8.8.8 and 8.8.4.4, I've tried https://protected.canadianshield.cira.ca/dns-query as well as https://149.112.121.20/dns-query. I've also tried moving my standard DNS over to 149.112.121.20 and 149.112.122.20 without success. I'm wondering if there is a bug with the custom DoH field or something similar?

I'm running the latest Box and App versions, I believe.

If you're interested in including the Canadian Shield service as another options, here is more details:

https://www.cira.ca/cybersecurity-services/canadianshield/how-works

Mike.

Firewalla

February 23, 2022 17:12
Edited

The second one https://149.112.121.20/dns-query has an invalid certificate. I'll ask our developer and see if they can test the first link

Mike999

February 23, 2022 17:55

Thanks. Neither changing standard DNS nor DoH seem to work with Firewalla. When I change IP numbers in Network configuration my DNS stops working. Really strange.

Alex Marz

July 19, 2022 17:46

I had the exact same problem. Firewalla was unable to resolve the issue and referred me back to CIRA. CIRA indicated they were not aware of any problems at that present time, and the same DoH configuration worked when manually entered into Firefox.

Please touch base if you were able to resolve this issue. Thanks!

July 20, 2022 00:17

No resolution. Honestly I gave up tinkering with too many other priorities.

CIRA Canadian Shield on Firewalla Gold

Comments

Didn't find what you were looking for?