4 ms·
> It seems to use internal DNS, which complicates things. I have the same TVs I resolved this with my router utilizing a firewall rule that redirects all udp
by kxrm 3y ago
> It seems to use internal DNS, which complicates things.
I have the same TVs I resolved this with my router utilizing a firewall rule that redirects all udp port 53 traffic back to my pihole.
- RajT88 3y agoSee - that would work if our TV was sending out DNS requests. It doesn't though! Like, it seems like it has its own truly internal DNS resolver, which gets updated I presume via OS updates.
- hackernudes 3y agoIt could be doing dns over https (DoH).
- whalesalad 3y agoyeah probably doing this, or using a secure vpn/tunnel or both.
- RajT88 3y agoI don't recall seeing HTTP traffic in the trace during TV startup and update check, so it's got to be a tunnel or internal. I'd read reports of some smart TV's having internal resolvers, hence my guess at that. I'll have to take another look though. If there's a DoH host I could block, that'd be nice.
- kxrm 3y agoInteresting, I wonder if newer OS updates are now using DoH. It's sad that I have to block upgrades for my TVs firmware for what could resolve potential security issues simply to have control over how my TV behaves on my network. This just re-enforces that I should continue to not let my TV upgrade it's firmware and continue to not let it access anything on the internet directly.
- graphe 3y agoWhat security problems are you worried about? I never cared for security, there's no money they can get or data, and if there's someone who wants to hack my network with it, good luck lol itll be easier to phish anyway.
- wkat4242 3y agoYup I tried this too. Not working. Must be using DoH. Or some proprietary resolver.
- deleted 3y ago[deleted]