• 0 Posts
  • 356 Comments
Joined 2 years ago
cake
Cake day: June 10th, 2023

help-circle


















  • I don’t think DNS blocking is sufficient for untrusted devices. A Pi-hole won’t stop or report on a device that doesn’t use it. WAN blocking is good when you can use it, but also not sufficient on its own and can render devices non-functional (which maybe they should be…). Virtual or physical LAN segregation and a firewall is required to both stop your trusted devices being accessed maliciously, and to block/sniff what the untrusted devices are doing with WAN access.