• [email protected]@kerala.party
    link
    fedilink
    arrow-up
    16
    ·
    1 year ago

    Well DNS based blocking has its problems mainly devices bypassing your network defined DNS with some encrypted DNS(DoT,DoH) or using hardcoded custom DNS servers.

    • kylian0087@lemmy.world
      link
      fedilink
      arrow-up
      11
      arrow-down
      1
      ·
      1 year ago

      You are able to force devices to use a specified DNS. even when they have hard coded DNS in them. Your router/firewall must be able to support redirection of network traffic though.

        • Vexz@kbin.social
          link
          fedilink
          arrow-up
          3
          ·
          edit-2
          1 year ago

          Yes but I think only very few applications use a hard coded DNS server. And under all those applications who use a hard coded DNS server is probably a very low percentage that uses encrypted DNS.

          • Vexz@kbin.social
            link
            fedilink
            arrow-up
            5
            ·
            1 year ago

            A hard coded IP would mean it’s unencrypted DNS which can be force-redirected to your router with NAT rules.

              • Vexz@kbin.social
                link
                fedilink
                arrow-up
                1
                ·
                1 year ago

                My computer uses unencrypted DNS and sends the queries to my router. My router does the encryption for forwarded DNS queries sent to the internet. There’s no need to encrypt DNS traffic in a LAN unless you don’t trust this LAN. The WAN (internet) is where evil people try to snoop on you.

    • Gresham's Law@lemmy.ml
      link
      fedilink
      arrow-up
      4
      ·
      edit-2
      1 year ago

      A. Device part of a business infrastructure:
      Just don’t change anything; those policy are there for a reason!

      B. Consumer device:
      1/ If we’re talking about proprietary hardware/software forcing your network to use a specific DNS, then you need to provide more details because you should be able to change it.

      2/ There is also the case for a malware:
      A fresh start is preferable.
      Disinfect the system while offline, then back up the needed files.
      Reinstall the system on a new/old formatted drive.
      With the exception of taking your privacy/security seriously this time.

    • Possibly linux@lemmy.zip
      link
      fedilink
      English
      arrow-up
      3
      ·
      1 year ago

      Sounds like you shouldn’t use those devices. I go for custom software personally so I can control the device itself