6 ms·

> before DoH, setting a custom DNS via DHCP was enough That ship had already sailed. You also have to run your own DNS, allow DNS egress only from your own DNS

by tbyehl 7y ago

> before DoH, setting a custom DNS via DHCP was enough That ship had already sailed. You also have to run your own DNS, allow DNS egress only from your own DNS, and DNAT the rest back to yours in order to un-break all the things with hard-coded resolvers.

Avamander 7y ago
Same with NTP surprisingly. Literally everything I have talks to a NTP server once in a while, but only Linux machines actually ask the network's NTP servers.
- tbyehl 7y ago
  Lots of embedded Linux devices have hardcoded NTP servers. Was caught by surprise at this after I'd segregated a bunch of stuff to have no Internet access.
  - Avamander 7y ago
    Absolutely, but I found it surprising that even my Kindle contacts an NTP server, or that both Android and Apple phones do. Why don't they ask DHCP for a nice stratum 1 server instead, I don't know, maybe someone here does?