2 ms·
Put a nat rule on your router to point a specific source address with target of UDP/53 to your desired dns server (and use the doh canary domain)
by midasuni 5y ago
Put a nat rule on your router to point a specific source address with target of UDP/53 to your desired dns server (and use the doh canary domain)
- scoopertrooper 5y agoThat's a flimsy solution as IP addresses are not generally static. Sure, you can manually assign an IP, but if the kids catch on, then they can just switch back to auto assign.
- midasuni 5y agoThat’s a different threat model - the kids not wanting it blocked. You can white list devices instead (so they’d have to spot a particular mac address), you can just add them to a different vlan in a different ssid (sane as you separate your IoT shit from your normal network), but you have to look at them establishing vpn to take traffic In this case the user wants it blocked and wants to fight the their device which acts against them (google doesn’t want you blocking google services)