• JackbyDev
    link
    fedilink
    English
    113 hours ago

    Firewall would help, yeah, but I don’t think PiHole would with a hard coded DNS server.

    • 0^2
      link
      fedilink
      English
      3
      edit-2
      11 hours ago

      Maybe i made it sound weird. Use a firewall to catch all dns traffic trying to leave the network and route it the PiHole/Adguard Home. This is how to make sure nothing, not even hardcoded dns on any app on any device, wont be filtered. I personally block google dns IPs on top of this but that’s just a precaution.

      • JackbyDev
        link
        fedilink
        English
        211 hours ago

        Ohh, yeah, I think that might work. I don’t really know the ins and outs of low level DNS stuff. With HTTPS that wouldn’t work unless you had some sort of self signed cert on your device, but I don’t think normal regular DNS traffic is encrypted at all. I see a lot of folks talk about the privacy aspect of it, so, yeah, maybe you can do that more easily.

        Is this something Pi Hole can do by itself? (With some settings on your router as well, of course, because you already have to set it as the DNS.)

        • 0^2
          link
          fedilink
          English
          36 hours ago

          You would need a firewall to provide any type of blocking or port forwarding. Most routers provide some basic ability to do this but it’s hit or miss and depends on the manufacturer. I came from a modded merlin asuswrt Asus router firmware to an opnsense firewall running on custom hardware.