If they are using new DNS server IPs, those would need to be added to the DOH/DNS lists that are on the internet that can be used by PFBlocker to reject requests to those servers, leaving your preferred method of DNS. Still it's forwarding, still not an authoritative DNS response, still no DNSSEC. I did that with Squid/Squidguard in PFSense 5 years ago. It looks to me, granted at first glance, that they have shifted that 'they see every DNS request' point from the public DNS server, to the proxy, guessing they could MITM the HTTPS at the proxy so they see everything. and what they are saying is there is an issue of the DNS server seeing the request and also seeing who is requesting. But the bigger question is: Will PFB devel be able to handle this new ODOH and block Maybe I am wrong, I have only looked at that one article with it's rather high level explanation of what they are pushing, but I don't see what I am gaining here. I read PFB may be able to handle normal DOH but don't know if can still block ads.
HIDE MY IP IPHONE UPGRADE
I plan to upgrade once I get a new machine since I don't want to make any changes now (family critical time).
I am currently running pfsense 2.4.5 and the old pfblocker not devel. With it ON it blocked only 4 (I don't know why there were any since it was encrypted) and page loads took 10-15 seconds! With it OFF PFB blocked 15 ads/sites and had consistent instant page loads. To verify I looked at the blocked URLs in a PFB log, I flipped Hide IP address off/on while reloading macrumors home page. It was related to the new Safari "Hide IP address" default option which uses "Obscure DOH" developed by Apple, Cloudeflare, etc.: /oblivious-dns that encrypted DNS requests. macOS Catalina and Big Sur were still fine, but Monterey had the same slowdown as iOS 15.1!Īfter hours of research and testing I found PFBlocker was not blocking sites. On iOS 15.1 I noticed a massive Safari slowdown and none of the normal ads were being blocked. Here is my experience and findings after upgrading all iOS iPhones and iPads to 15.1, and macOS Monterey: This is a heads up for anyone else who runs into this.
0 kommentar(er)
