27
you are viewing a single comment's thread
view the rest of the comments
[-] ftbd@feddit.org 7 points 7 months ago

FYI for those using DNS-based adblocking: I discovered that my AndroidTV box asks 8.8.8.8 when my local DNS server blocks a request.

[-] sugar_in_your_tea@sh.itjust.works 1 points 7 months ago

Dang, so you'd have to block Google's DNS at the router level too?

[-] addie@feddit.uk 1 points 7 months ago

What a shower of twats. Don't block the request in that case, just redirect it to your local server that returns a 1x1 transparent png for all requests.

[-] Saik0Shinigami@lemmy.saik0.com 1 points 7 months ago* (last edited 7 months ago)

Block all port 53 traffic from your network outside of your DNS server/pihole itself.
Block all known DoH servers.

If you want to get REALLY fancy you can write a NAT rule that will force any outgoing request on port 53 to route to your dns/pihole.

I do all of this. It's actually funny to see the requests that were hardcoded to go somewhere. Giant fuck you to those companies.

[-] Goun@lemmy.ml 1 points 7 months ago

Do DoH requests go though 443?

[-] Saik0Shinigami@lemmy.saik0.com 1 points 7 months ago

Yes. But there are lists of well known IPs that are serving DoH. So you can just block those. Obviously blocking 443 is not a good idea.

[-] Goun@lemmy.ml 1 points 7 months ago

Damn, never digged into that I thought blocking the DNS port would be enough, thanks for the information.

[-] wrekone@lemmy.dbzer0.com 1 points 7 months ago

Depending on your router you can forward all request on port 53 to your DNS server regardless of the IP they try to use.

[-] stupidcasey@lemmy.world 1 points 7 months ago

I always have issues with dns blocking so I tried something sneaky I redirected all DNS requests to 1.1.1.1/1.0.0.1 and it worked brilliantly, for about a month when it stopped working all together, I don’t know if a cache was wiped or google saw what I was doing and made a special exception just for me, obviously I want to believe I’m a special snowflake taking the world’s largest internet company head on in an epic battle of wits and skill but I think the cache thing might be more likely for some reason.

[-] ftbd@feddit.org 1 points 7 months ago

You mean redirecting on your router? How should google stop you from doing that? And why would you redirect to cloudflare lol

this post was submitted on 22 Nov 2024
27 points (100.0% liked)

Technology

71718 readers
2105 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS