6 ms·
You should try running it through a pihole. Even better, maybe you can manage to MITM it and replace the ads with something funny.
by tornato7 6y ago
You should try running it through a pihole. Even better, maybe you can manage to MITM it and replace the ads with something funny.
- lostlogin 6y agoSome devices bypass the Pihole, and while you can catch them at the firewall, it’s a tedious game.
- panpanna 6y agoSo what we need is a jailbreak and custom firmware?
- lostlogin 6y agoVery very much so.
- 867-5309 6y agohow is it possible to bypass? if it is the only thing available then it is impossible to use an alternative
- girvo 6y agoThey use their own DNS rather than PiHole’s.
- mateuszf 6y agoIf they use own DNS then maybe it can be disabled by IP rule in firewall?
- Spare_account 6y agoIf they can't get to their preferred DNS servers directly then they use DNS-over-HTTPS which you can't block.
- jon-wood 6y agoPiholes just replace DNS results, so a device using hard coded DNS servers allows it to bypass that. This leads to people redirecting all port 53 traffic to the Pihole, which leads to devices/apps doing DNS over HTTPS, at which point it’s game over unless you can get your self-signed cert onto the device.
- 867-5309 6y agobut surely these devices are set up to use DHCP and receive home users' DNS servers? giving them static IPs would not work. I suppose it depends on a) if these devices are somehow set up to receive just an IP address over DHCP and use their own hardcoded DNS servers and b) whether the home DHCP server / router would honour this and not enforce its own DNS servers along with the IP address
- jon-wood 6y agoThey’ll be using DHCP, but even when not doing anything nefarious you’re better off using known DNS servers when deploying appliances on random networks because consumer ISPs have a habit of ignoring TTLs and redirecting DNS results when you’re reaching bandwidth quotas and the like.
- 867-5309 6y agothen the DHCP can assign PiHole as the DNS resolver, and if the requested domain isn't in its block list then it will be forwarded to google, cloudflare, etc. i. e. the ads on smart devices can be blocked