Comment on AdGuard Home only showing router IP address in client list
ioslife@lemmy.sdf.org 11 months agoWouldn’t that effectively break the internet? Or are you saying there is a way in AGH to block DNS requests outside of my trusted DNS IPs?
Comment on AdGuard Home only showing router IP address in client list
ioslife@lemmy.sdf.org 11 months agoWouldn’t that effectively break the internet? Or are you saying there is a way in AGH to block DNS requests outside of my trusted DNS IPs?
bladewdr@infosec.pub 11 months ago
You can set up firewall rules to redirect the traffic destined for public DNS servers to your internal DNS server.
Not sure how to construct that rule in the unifi firewall but it comes down to “any outbound traffic on port 53 that’s not destined for the adguard server, redirect it.”
StopSpazzing@lemmy.world 11 months ago
Correct. But not only port 53 but also 853. I would also suggest disabling ipv6 if it’s unused as I’ve had services bypass my DNS with hardcoded ipv6 and ipv4 IPs as I mentioned before. Unless you absolutely need it for some reason.