Encrypted DNS

Posted May 21, 2025 0:30 UTC (Wed) by pabs (subscriber, #43278)
In reply to: Encrypted DNS by pabs
Parent article: Red Hat Enterprise Linux 10 released

Alternatively, you could require they go through a filtering SOCKS5 proxy that does the DNS requests itself, and block all other network access.

Posted May 21, 2025 0:53 UTC (Wed) by Cyberax (✭ supporter ✭, #52523) [Link]

This breaks some video applications running on smart TVs or similar "player boxes".

I would suggest just chucking all of them into a "sewer" VLAN that is isolated from anything else.

Posted May 21, 2025 10:31 UTC (Wed) by paulj (subscriber, #341) [Link] (1 responses)

What would stop a client using a SOCKS5 proxy to run its own DoH requests over that SOCKS connection to its own private DoH server?

Posted May 21, 2025 12:14 UTC (Wed) by Wol (subscriber, #4433) [Link]

> > and block all other network access.

You missed that. The network would only be usable for DNS lookups :-)

Cheers,
Wol