AdventuringAardvark@lemmy.one to Selfhosted@lemmy.worldEnglish · 10 months agoI finally figured out how to virtualize my OPNsense firewall. Suck it, Roku.lemmy.oneimagemessage-square37fedilinkarrow-up1178arrow-down13file-text
arrow-up1175arrow-down1imageI finally figured out how to virtualize my OPNsense firewall. Suck it, Roku.lemmy.oneAdventuringAardvark@lemmy.one to Selfhosted@lemmy.worldEnglish · 10 months agomessage-square37fedilinkfile-text
minus-squarerandombullet@feddit.delinkfedilinkEnglisharrow-up12·10 months agoI do a DNS redirect on my Mikrotik router. It’s going to suck when DoH and DoT becomes more prevalent.
minus-squarePossibly linux@lemmy.ziplinkfedilinkEnglisharrow-up10·10 months agoI think the solution is to avoid tech that you don’t control. Its a hard pill to swallow for some but at the end of the day there are tons of ways a device could bypass networking restrictions
minus-squareblackstrat@lemmy.fwgx.uklinkfedilinkEnglisharrow-up2·10 months agoBest you can do is maintain a list of public DoH IPs and block them. Redirect all port 53 traffic to your own DNS server.
I do a DNS redirect on my Mikrotik router.
It’s going to suck when DoH and DoT becomes more prevalent.
I think the solution is to avoid tech that you don’t control. Its a hard pill to swallow for some but at the end of the day there are tons of ways a device could bypass networking restrictions
Best you can do is maintain a list of public DoH IPs and block them. Redirect all port 53 traffic to your own DNS server.