At first, Pi-hole was enough, but some devices had a software update a year or two ago that used Google (if memory serves) DNS as a backup. It was sneaky, but adding a block rule closed that loophole.
Not all devices had that change though. I’m hoping mine is old enough to be ignored for the new video ads.
At first, Pi-hole was enough, but some devices had a software update a year or two ago that used Google (if memory serves) DNS as a backup. It was sneaky, but adding a block rule closed that loophole.
Not all devices had that change though. I’m hoping mine is old enough to be ignored for the new video ads.
I imagine they’ll eventually work around block rules with DNS over https.
Then you block that too at the router level (port 853 if my memory is correct)
DNS over TLS (aka DoT) uses port 853. DNS over HTTPS (aka DoH) uses port 443 so that it looks the same as any other web traffic for privacy reasons.