Comment on AdGuard Home only showing router IP address in client list
StopSpazzing@lemmy.world 11 months ago
I also will note you should add some catch all’s to block known dns ips like Google’s, as there are many devices with hard coded DNS in them that will bypass your DNS. I use opnsense and block all dns requests except to my adguard home + Google DNS Ips.
ioslife@lemmy.sdf.org 11 months ago
Wouldn’t that effectively break the internet? Or are you saying there is a way in AGH to block DNS requests outside of my trusted DNS IPs?
bladewdr@infosec.pub 11 months ago
You can set up firewall rules to redirect the traffic destined for public DNS servers to your internal DNS server.
Not sure how to construct that rule in the unifi firewall but it comes down to “any outbound traffic on port 53 that’s not destined for the adguard server, redirect it.”
StopSpazzing@lemmy.world 11 months ago
Correct. But not only port 53 but also 853. I would also suggest disabling ipv6 if it’s unused as I’ve had services bypass my DNS with hardcoded ipv6 and ipv4 IPs as I mentioned before. Unless you absolutely need it for some reason.