you are viewing a single comment's thread
view the rest of the comments
[–] 11 points 4 days ago (6 children)

I don't know about that part (though would like to know as well), this is currently blocked on my pi-hole:

including my custom RegExs. This surely helps but there are domains constantly pop-up every now and then, so it's not fool-proof.

  • source
  • parent
  • hideshow 6 child comments
  • [–] 6 points 4 days ago* (3 children)

    It put my TV in its own group in pi-hole, blocked everything (.*) for that group, and then whitelisted what I wanted the TV to be able to get to.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 2 points 4 days ago (2 children)

    I should try this. I presume you would need static IP on your TV?

  • source
  • parent
  • hideshow 2 child comments
  • [–] 4 points 4 days ago (1 child)

    You can also add devices to groups by MAC address or hostname, but a static IP might be best.

    I only need a couple of domains to work. My way could be a hassle if you need to figure out whitelists for a few services.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 4 points 4 days ago (1 child)

    I caught an app that my daughter's school uses called ClassDojo that wouldn't work at my company for some reason. I had to reach out to our security admin and it turns out it was doing DNS lookups by bypassing my company's DNS server. I submitted a ticket to the company and they ended up either designing the app to fallback to the device's assigned DNS or either probably doing something else shady. Idk, it works now.

    My point is there's more than one way to do a DNS lookup.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 3 days ago

    Yeah that looks suspicious.

    It's definitely not fool-proof, apparently they can bypass DNS for their connections too. On the other hand, IP block is a thing as well, so maybe it's a double-edged sword for them.

  • source
  • parent