Hacker News new | ask | show | jobs
by smokefreeskies 2050 days ago
I set up a rule on my router to drop any DNS traffic and DoH traffic to well known DNS providers unless it comes from the server running pihole. Otherwise it was proving very hard to find out how to force applications / mobile devices to use my DNS server.
2 comments

That only works as long as you can easily distinguish the DNS traffic from the rest, right?

For instance if my VideoApp serves content from videoapp.example.com and I use my own DNS also at videoapp.example.com, served over DoH, I think that's basically the end for host-based content blockers.

you could also just NAT port 52 to your pihole. (translating 8.8.8.8 ofcourse).

I don't know if this would work with DoH. (but DoH is terrible anyways)