5 ms·
PiHole is for DNS blocking. So if say your TV calls out to backdoor.example.com - then PiHole can block it. If instead it calls out to 1.2.3.4 (i.e no DNS lo
by paranoidrobot 6y ago
PiHole is for DNS blocking.
So if say your TV calls out to backdoor.example.com - then PiHole can block it.
If instead it calls out to 1.2.3.4 (i.e no DNS lookup) - then PiHole won't block it for you, you'd have to instead set up controls on the firewall/router/etc to filter traffic.
- pixl97 6y agoJust wait till all the smart devices come with a preloaded DoT/DoH list.
- shagie 6y agoThat would be this thread - https://mailarchive.ietf.org/arch/msg/dnsop/WCVv57IizUSjNb2RQNP84fBclI0/ https://mailarchive.ietf.org/arch/msg/dnsop/WCVv57IizUSjNb2R... and this post https://news.ycombinator.com/item?id=19170671 https://news.ycombinator.com/item?id=19170671
- rasz 6y agorecycling my comment from Mozilla DoH story: Wanted: Firewall blocking all traffic directed at IP addresses not obtained from OS DNS resolver. aka dynamic application level FQDN Egress Filtering. Mayor Cloud providers (aws, azure) and bigger firewalls (fortinet, cisco, paloalto) already offer ~half of what I want. I want a little deamon that listens for DNS queries/replies and modifies firewall rules accordingly.