3 ms·
1. Use Wireguard. 2. It has a DNS option[1]. Set it to your Wireguard server. 3. Setup unbound with a public ad domain list. (No link for this, Google is your
by eximius 8y ago
1. Use Wireguard.
2. It has a DNS option[1]. Set it to your Wireguard server.
3. Setup unbound with a public ad domain list. (No link for this, Google is your friend and there are several different options with minor tradeoffs.)
You're done. Now unless wireguard, a soon to be kernel project, or unbound injects malicious code, you're safe.
Edit: oh and this also works on mobile
[1] wg-quick man page - https://git.zx2c4.com/WireGuard/about/src/tools/man/wg-quick.8 https://git.zx2c4.com/WireGuard/about/src/tools/man/wg-quick...