3 ms·
Ok, I’m trying to set up a block for this within the unifi interface itself. Looks like the best option is a firewall rule dropping all “wan out” traffic origin
by mokus 7y ago
Ok, I’m trying to set up a block for this within the unifi interface itself. Looks like the best option is a firewall rule dropping all “wan out” traffic originating from my access point. Am I missing a better option?
- vetinari 7y agoI would prefer returning NXDOMAIN for that host; with blocked IPs, once ubnt changes their dns, your rules will be obsolete. On the other hand, I never understood how to configure dnsmasq on usg in a permanent way (not only blocking hosts, but also static SRV and TXT records). It it supposed to be done via gateway.config.js, but finding the right json keywords is the issue. Is there someone who can drop some hints?
- mokus 7y agoThat’s why I’m blocking ALL destinations. I don’t think any valid packets out of my network need to have my AP itself as source addr.