4 ms·
And there's a lot more "ways around" than there used to be, too. Go find me a simple way to block DNS over HTTPS at a router, so requests are forced to the DNS
by Syonyk 3y ago
And there's a lot more "ways around" than there used to be, too.
Go find me a simple way to block DNS over HTTPS at a router, so requests are forced to the DNS server I have control over (Pi-Hole or such). I've yet to find one that doesn't involve "Maintaining a list of DNS-over-HTTPS providers and blocking them by IP."
- ndriscoll 3y agoThis certainly could be done by only allowing outgoing traffic to addresses that have been in the results of a recent DNS lookup (so your DNS server tells your firewall about client lookups). I don't know whether any off-the-shelf solution can do that though. You could also require all traffic to go through a MITM proxy so you can inspect it, though that wouldn't work so well for guests.