Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
I think there should also be some 'crowdfunding' possibility...
Is a facility set up where users that want to show their appreciation can deposit a financial 'thank you'?
The AGH to Bind is less important if both are running on the FW, there's no rogue traffic there to be concerned about.good to know. Both are running on the FW.
From the home screen, tap Settings.
Choose Wi-Fi in the left menu (it is impossible to configure DNS for mobile networks).
Tap on the name of the currently active network.
In the DNS field enter your AdGuard Home server addresses.the clients on your LAN will (presumably) still be talking to AGH over port 53 with no "security".-> I think that is the answer than, clients will use plain dns over port 53, so there is no way to secure DNS more on LAN
What problem are you actually trying to solve here anyway? It seems like a lot of complexity for a problem that's not really clear (to me)....
dig @127.0.0.1 google.com +tls
; <<>> DiG 9.20.2 <<>> @127.0.0.1 google.com +tls
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 25158
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; COOKIE: 19fc68c433fb6a90010000006714f4f3deedd5f14a92df93 (good)
;; QUESTION SECTION:
;google.com. IN A
;; ANSWER SECTION:
google.com. 300 IN A 142.250.179.174
;; Query time: 6 msec
;; SERVER: 127.0.0.1#853(127.0.0.1) (TLS)
;; WHEN: Sun Oct 20 14:17:55 CEST 2024
;; MSG SIZE rcvd: 83
// Listen on port 853 for DoT
tls-port 853;
// Path to your certificate and key
tls-cert "/var/etc/cert.pem";
tls-key "/var/etc/key.pem";
// Enable TLS
listen-on port 853 { 127.0.0.1; };