zlacker

[parent] [thread] 3 comments
1. boiler+(OP)[view] [source] 2025-09-30 16:58:45
Spot on! My samsung TV menus are soooo much better in terms of snappiness by having Pi-Hole running and also setting up DNAT for those IoT devices who want to hardcode their DNS.
replies(1): >>accrua+D7
◧
2. accrua+D7[view] [source] 2025-09-30 17:33:46
>>boiler+(OP)
> DNAT (Destination Network Address Translation)

Yes! This is easy to do on OpenBSD as well, though it's called "redirect" instead of "DNAT":

    pass in quick on $int_if inet proto udp to any port 53 rdr-to $dns_server port 53
    pass in quick on $int_if inet proto tcp to any port 53 rdr-to $dns_server port 53
replies(2): >>drnick+0M >>bombel+3l1
◧◩
3. drnick+0M[view] [source] [discussion] 2025-09-30 20:46:27
>>accrua+D7
I also redirect port 53 traffic, and in addition filter traffic to "well known" public DNS servers like 1.1.1.1, 8.8.8.8, 9.9.9.9 and many others (lists can be found on GitHub), but this is ineffective against ads and telemetry served from hardcoded IPs.

Overall, it's just easier not to connect "smart" devices to the Internet at all. I prefer to use a Linux HTPC instead of a smart TV for example. It is completely under my control and I am not restricted to apps approved by Apple or Google, asked to log into anything or to accept ever-changing terms and conditions.

◧◩
4. bombel+3l1[view] [source] [discussion] 2025-10-01 01:05:43
>>accrua+D7
This config is surprisingly easy to read.
[go to top]