4 ms·
Many (including google) devices use hardcoded DNS settings. You also need firewall rules to prvent them from using 8.8.8.8 and friends.
by entropie 5y ago
Many (including google) devices use hardcoded DNS settings. You also need firewall rules to prvent them from using 8.8.8.8 and friends.
- hunter2_ 5y agoAh, good point. With those firewall rules in place, do such devices seamlessly fall back to whatever they DNS they learned from DHCP?
- netr0ute 5y agoWhat I do is set a reverse NAT rule that reverse proxies 8.8.8.8 to my DNS, so to devices where it's hardcoded, they can't tell the difference.
- tpxl 5y agoYou can also redirect all port 53 traffic to your DNS instead of redirecting IPs one by one.
- hunter2_ 5y agoBrilliant. I'll be trying that on pfsense [0] soon. [0] https://docs.netgate.com/pfsense/en/latest/recipes/dns-redirect.html https://docs.netgate.com/pfsense/en/latest/recipes/dns-redir...