Solved Help with Forcing All Traffic to DNS

[SomeWhereOverTheRainBow]

When you say it blocks vpns.. does that mean, it blocks vpn apps on smart devices from connecting to the Internet?

No, it blocks devices from access popular vpn services via the vpn providers domain/hostname addresses. Typically, they can still be accessed if the person knows the ip address. If the smart phone app relies in accessing the vpn via hostname of a popular vpn service on the blocklist, then the smart devices will not be able to connect via vpn app. Vpn apps that connect to vpn providers over hostname or domain address require the ability to resolve the hostname for the ip address to connect to. If the domain address is on the block list, then the vpn app can no longer determine the ip address from the blocked hostname in order to establish connection.

The way around this is to connect directly to the vpn providers via ip address.

Personally, I think it is better to block these bypass techniques directly on the firewall via IP address.

 

[macster2075]

So, which one is your list... or both?

https://raw.githubusercontent.com/dibdot/DoH-IP-blocklists/master/doh-domains.txt

or

GeneratedAdblock/NoBypass.list at master · jumpsmm7/GeneratedAdblock

Contribute to jumpsmm7/GeneratedAdblock development by creating an account on GitHub.

github.com

 

[SomeWhereOverTheRainBow]

So, which one is your list... or both?

https://raw.githubusercontent.com/dibdot/DoH-IP-blocklists/master/doh-domains.txt

or

GeneratedAdblock/NoBypass.list at master · jumpsmm7/GeneratedAdblock

Contribute to jumpsmm7/GeneratedAdblock development by creating an account on GitHub.

github.com

The second one is mine. The first list is just a very comprehensive doh list.

 

[macster2075]

I'll just add all 3 if it won't hurt anything lol.

 

[macster2075]

@SomeWhereOverTheRainBow any recent updates on your doh ip block list?
I notice when using https://doh.cleanbrowsing.org/doh/family-filter{?dns} in Edge browser as the Secure DNS, it bypasses filtering.

How can I add that to the block list?

 

[SomeWhereOverTheRainBow]

@SomeWhereOverTheRainBow any recent updates on your doh ip block list?
I notice when using https://doh.cleanbrowsing.org/doh/family-filter{?dns} in Edge browser as the Secure DNS, it bypasses filtering.

How can I add that to the block list?

doh.cleanbrowsing.org is line 702 on my nobypass domain blocklist. So the answer is no. Nothings changed.

https://raw.githubusercontent.com/jumpsmm7/GeneratedAdblock/master/NoBypass.list

Have you changed something locally at the device or router level ? E.g dns director configuration, vpn, or change in dns address advertised via lan dhcp? It would have to be a configuration change on your end to cause this change.