3 ms·
Well, it is also possible to not use port 53 as UDP to resolve DNS. So, if it is using HTTPS for DNS resolution, I don’t know how you would block that. If you
by daniellarusso 6y ago
Well, it is also possible to not use port 53 as UDP to resolve DNS.
So, if it is using HTTPS for DNS resolution, I don’t know how you would block that.
If you could install a self-signed cert onto the device, you could MitM the HTTPS traffic and see what it is doing.
- Reelin 6y ago> if it is using HTTPS for DNS resolution, I don’t know how you would block that By filtering traffic sent from that particular device based on a query to your DNS filter to approve or deny the destination address. (Some implementation work probably required.)