4 ms·
PiHole uses the DoH canary domain by default, so if you use PiHole it should just work without any effort on your part, and effectively disables DoH network wid
by tristor 5y ago
PiHole uses the DoH canary domain by default, so if you use PiHole it should just work without any effort on your part, and effectively disables DoH network wide. You can search how to encrypt the lookups that PiHole makes itself, a common scenario is to install cloudflared on the PiHole and point it at localhost, which you can see here: https://nathancatania.com/posts/pihole-dns-doh/ https://nathancatania.com/posts/pihole-dns-doh/
- Y_Y 5y agoEven if you specify them by IP? I specifically redirect addresses like 8.8.8.8 to my pihole (at the router) to prevent cheeky applications circumventing it.
- tristor 5y agoI'm not certain, but I believe that would still work, because the lookup for the canary domain is done using the local resolver and if you are redirecting its configuration to your PiHole, the PiHole would respond. It sounds like you have a relatively unique network configuration, so I'd advise that you test this and share the results with all of us.
- zinekeller 5y agoNot OP, but yes, it should work (as long as you're talking plain DNS on port 53. Direct DoH, you're out of luck unless you want to DPI or block IPs (and if it's Cloudflare, it's block all of Cloudflare or allow their DoH version of 1.1.1.1).
- zinekeller 5y agoIt'll still work, check if use-application-dns.net returns NXDOMAIN.