2 ms·
Little Snitch WAS NEVER A GOOD PRODUCT if you're worried about DNS-leaks. Fact: Little Snitch resolves the IP address (i.e. does domain-to-IP lookup) before th
by ProllyInfamous 2y ago
Little Snitch WAS NEVER A GOOD PRODUCT if you're worried about DNS-leaks.
Fact: Little Snitch resolves the IP address (i.e. does domain-to-IP lookup) before the Deny/Allow dialogue ever appears onscreen. Only by pressing "Allow" does Little Snitch then allow/initiate connections to the already-resolved IP ADDRESS.
- maeil 2y agoThen do you have a suggested alternative?
- ProllyInfamous 2y ago/r/PiHole I run four, locally [50+ users]. Local DNS Server issues default lookup server @x.x.x.2 (e.g. minimal blocklist PageAd, CloudFare), for maximal client compatibility. Users can thereafter upgrade levels of blocking by manually increasing DNS IP +1 (e.g. x.x.x.3 for stricter blocking, whereas default x.2 only blocks seven very common trackers), at host-level. They can also manually enter x.x.x.1 and thereafter have no DNS-restrictions [this is the router itself, which each x.x.x.N itself resolves to, via our ISP's own DNS serverlist]. Our x.x.x.5 is top-notch white-page browsing, but many applications won't work (e.g. banking; although surprisingly Youtube still works although you do have to watch pre-roll ads). I have one user who there-after has his own local subnet/PiHole, although you can hop-up to PiHoles, as long as the subnet is a child or sibling of that DNS-resolver.