• ftbd@feddit.org
    link
    fedilink
    English
    arrow-up
    21
    ·
    1 day ago

    FYI for those using DNS-based adblocking: I discovered that my AndroidTV box asks 8.8.8.8 when my local DNS server blocks a request.

    • Saik0@lemmy.saik0.com
      link
      fedilink
      English
      arrow-up
      6
      ·
      edit-2
      1 day ago

      Block all port 53 traffic from your network outside of your DNS server/pihole itself.
      Block all known DoH servers.

      If you want to get REALLY fancy you can write a NAT rule that will force any outgoing request on port 53 to route to your dns/pihole.

      I do all of this. It’s actually funny to see the requests that were hardcoded to go somewhere. Giant fuck you to those companies.

    • addie@feddit.uk
      link
      fedilink
      English
      arrow-up
      7
      ·
      1 day ago

      What a shower of twats. Don’t block the request in that case, just redirect it to your local server that returns a 1x1 transparent png for all requests.

      • sanguinet@lemmy.ca
        link
        fedilink
        English
        arrow-up
        4
        ·
        1 day ago

        I wouldn’t mind doing it. I run my own DNS so it wouldn’t affect me, but I figure if they’re already trying 8.8.8.8 they may as well try 8.8.4.4 and perhaps more, so it’d require a bunch of firewall rules.

        Now, all of that is moot point cause I hate the whole “smart TV” thing, so they’d never be connected to the internet.

      • ftbd@feddit.org
        link
        fedilink
        English
        arrow-up
        3
        ·
        1 day ago

        I set up my firewall to block all outgoing traffic to ports 53 and 853 (except for the upstream traffic from my pihole). I suppose DoH could still sneak through though.