3 ms·
I would prefer returning NXDOMAIN for that host; with blocked IPs, once ubnt changes their dns, your rules will be obsolete. On the other hand, I never underst
by vetinari 7y ago
I would prefer returning NXDOMAIN for that host; with blocked IPs, once ubnt changes their dns, your rules will be obsolete.
On the other hand, I never understood how to configure dnsmasq on usg in a permanent way (not only blocking hosts, but also static SRV and TXT records). It it supposed to be done via gateway.config.js, but finding the right json keywords is the issue. Is there someone who can drop some hints?
- mokus 7y agoThat’s why I’m blocking ALL destinations. I don’t think any valid packets out of my network need to have my AP itself as source addr.