Netflix + IPv6 HE tunnel + Chromecast

dnsmasq.conf

server=/netflix.com/#
address=/netflix.com/::
server=/netflix.net/#
address=/netflix.net/::
server=/nflxext.com/#
address=/nflxext.com/::
server=/nflximg.net/#
address=/nflximg.net/::
server=/nflxvideo.net/#
address=/nflxvideo.net/::
server=/nflxso.net/#
address=/nflxso.net/::

dnsmasq.openwrt

config dnsmasq
	list server '/netflix.com/#'
	list server '/netflix.net/#'
	list server '/nflxext.com/#'
	list server '/nflximg.net/#'
	list server '/nflxvideo.net/#'
	list server '/nflxso.net/#'
	list address '/netflix.com/::'
	list address '/netflix.net/::'
	list address '/nflxext.com/::'
	list address '/nflximg.net/::'
	list address '/nflxvideo.net/::'
	list address '/nflxso.net/::'

firewall.debian

iptables -A PREROUTING -p tcp -m tcp --dport 53 -m mac --mac-source XX:XX:XX:XX:XX:XX -m comment --comment "dns chromecast tcp" -j REDIRECT --to-ports 53
iptables -A PREROUTING -p udp -m udp --dport 53 -m mac --mac-source XX:XX:XX:XX:XX:XX -m comment --comment "dns chromecast udp" -j REDIRECT --to-ports 53

firewall.openwrt

config redirect
	option target 'DNAT'
	option proto 'tcp udp'
	option src_dport '53'
	option dest_port '53'
	option name 'Force-DNS-Chromecast'
	option src 'lan'
	list src_mac 'XX:XX:XX:XX:XX:X1'
	list src_mac 'XX:XX:XX:XX:XX:X2'

route.debian

ip -6 route add blackhole 2620:108:700f::/48
ip -6 route add blackhole 2a01:578:3::/48
ip -6 route add blackhole 2406:da00:ff00::/48
ip -6 route add blackhole 2607:f8b0:4001::/48
ip -6 route add blackhole 2600:1407:19::/48
ip -6 route add blackhole 2a05:d018:76c::/48
ip -6 route add blackhole 2600:1f14:62a:de80::/61
ip -6 route add blackhole 2a00:86c0:2041::/48

route.openwrt

config route6
	option interface 'wan6'
	option target '2620:108:700f::/48'
	option type 'blackhole'

config route6
	option interface 'wan6'
	option target '2a01:578:3::/48'
	option type 'blackhole'

config route6
	option interface 'wan6'
	option target '2406:da00:ff00::/48'
	option type 'blackhole'

config route6
	option interface 'wan6'
	option target '2607:f8b0:4001::/48'
	option type 'blackhole'

config route6
	option interface 'wan6'
	option target '2600:1407:19::/48'
	option type 'blackhole'

config route6
	option interface 'wan6'
	option target '2a05:d018:76c::/48'
	option type 'blackhole'

config route6
	option interface 'wan6'
	option target '2600:1f14:62a:de80::/61'
	option type 'blackhole'

config route6
	option interface 'wan6'
	option target '2600:1f18:631e::/48'
	option type 'blackhole'

config route6
	option interface 'wan6'
	option target '2a00:86c0:2041::/48'
	option type 'blackhole'