Haack's Networking

✍️ Hijacking DNS & Stopping DoH

🔗 https://tech.haacksnetworking.org/2026/09/06/hijacking-dns-stopping-doh/

🧻 This tutorial is designed for #openwrt users and #pihole / #unbound users looking for a clean way to protect your LAN's DNS. This tutorial used a dedicated vlan/subnet with 4 Wyze v4 cams but/and can easily be extended to any IoT devices one chooses. There are three types of actions covered in this tutorial:

- Hijacking plain-text udp 53 and udp 853 DNS requests
- Hijacking tcp 853 (DoT) requests
- Dropping DoH requests for specified upstream DNS ips

📜 I hope people find this tutorial helpful. Feedback and comments are welcome. For those seeking assistance and/or if you want to chat about setup or other Linuxy stuffs, feel free to swing by the GNU/Linux Club Matrix over at https://matrix.to/#/#introductions:gnulinux.club

#OpenWrt #PiHole #Unbound #DNS #DoH #DoT #DoQ #Firewall #TrafficRules #PortForward #tcpdump #VLAN #IoT #Privacy #SelfHosted #Homelab #AWSIoT #NetworkSecurity #FOSS #Debian #floss #freesoftware #opensource

There will be a PF tutorial at EuroBSDCon 2026 in Brussels:

Network Management with the PF Packet Filter Toolset on OpenBSD and FreeBSD
Featuring Tom Smyth and Peter Hansteen, 2026-09-11, 10:30, full day

See https://events.eurobsdcon.org/2026/talk/RKCHRW/
To register: https://tickets.eurobsdcon.org/eurobsdcon/brussels/
#eurobsdcon #bsd #openbsd #freebsd #networking #firewall #security