7 ms·
Is there any DNS based software to do block/allow? Kinda lika what's present in CiliumNetworkPolicies in Kubernetes networking?
by toredash 5mo ago
Is there any DNS based software to do block/allow? Kinda lika what's present in CiliumNetworkPolicies in Kubernetes networking?
- Milpotel 5mo agoYou mean like PiHole or AdGuard?
- M95D 5mo agoYes, PiHole is the most common, but malware can easily bypass that using shared domains, P2P or IP addresses directly. Use a filtering proxy instead and no gateway / route to the internet.
- chupasaurus 5mo ago1) Dnsmasq, you don't need the whole PiHole for that. 2) You're advising security through obscurity instead of a network namespace + firewall.
- M95D 5mo agoPlease explain #2. How is a filtering proxy security through obscurity?
- gus_ 5mo agoOpenSnitch (+ block lists) ;) or DNS stubs with filtering capabilities.