Timeline for Selectively enable private DNS
Current License: CC BY-SA 4.0
18 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| S Feb 21, 2022 at 11:06 | history | bounty ended | Joachim Sauer | ||
| S Feb 21, 2022 at 11:06 | history | notice removed | Joachim Sauer | ||
| Feb 16, 2022 at 17:58 | answer | added | Ashwani | timeline score: 0 | |
| Feb 15, 2022 at 10:07 | comment | added | Joachim Sauer | I'll leave it open in the hopes that an even better solution is somewhere out there. I'm not too worried about those precious internet points ;-) | |
| Feb 15, 2022 at 10:07 | comment | added | beeshyams | If that answer is what you are looking for, instead of wasting your your bounty drop into the chat room and request the mods to mark this question is a duplicate of that and possibly refund bounty | |
| Feb 15, 2022 at 10:05 | comment | added | Joachim Sauer | That seems to be pretty much exactly the answer I would have written. I think I even came across that post when I first researched this, but back then I was hoping to find a solution that wouldn't require a paid-for external tool. | |
| Feb 15, 2022 at 10:02 | comment | added | beeshyams | android.stackexchange.com/q/239398/131553. closely related? | |
| Feb 15, 2022 at 10:02 | comment | added | Joachim Sauer | If no one else does, I'll write up an answer myself in a few days. Just feels weird to jump in to self-answer when I just put a bounty up. | |
| Feb 15, 2022 at 9:58 | comment | added | beeshyams | Maybe, someone can build on this to get the bounty.. I am neither familiar with Tasker nor with the networking aspects, just googled it! // any body who can make an answer please do | |
| Feb 15, 2022 at 9:31 | comment | added | Joachim Sauer | @beeshyams: yes, this seems at least a partial solution. It allows me to enable/disable private DNS on some condition without having to have root (but involving a couple of manual steps). In an ideal world I'd even do the "split DNS" thing I mentioned above, but if this were an actual answer with details, someone could probably earn that bounty. | |
| Feb 15, 2022 at 9:10 | comment | added | beeshyams | reddit.com/r/tasker/comments/9yvo2h/… looks like what you are after | |
| S Feb 14, 2022 at 10:42 | history | bounty started | Joachim Sauer | ||
| S Feb 14, 2022 at 10:42 | history | notice added | Joachim Sauer | Draw attention | |
| Jan 27, 2022 at 13:59 | comment | added | Joachim Sauer | Sure, that's why I'm also okay with having to explicitly mark a network to be used like this. As it stands it seems like I need to firewall any access to the private dns servers, which I suspect enables the exact same attack (given the fact that Private Browsing is set to "Automatic" and not "Force Enabled" or something like that). | |
| Jan 27, 2022 at 13:55 | comment | added | Robert |
So if I am an attacker/admin in the local network I just need to advertise may be .com as the local network suffix to redirect all DNS requests away from the private DNS server. This would be a security issue and violate the purpose of the private DNS.
|
|
| Jan 27, 2022 at 13:42 | comment | added | Joachim Sauer |
@Robert: based on the known prefix for local host names. The DHCP server provides the domain for the local network and I'd like the local DNS (also provided by the DHCP server) to be used for anything with that suffix (i.e. if the DHCP server says its local network is local.example.com then I'd like any hostname ending in .local.example.com to be routed to the local DNS and anything else elsewhere).
|
|
| Jan 27, 2022 at 13:27 | comment | added | Robert | If you could use both local DNS and private DNS at the same time how should your phone know which DNS server to use for what query? | |
| Jan 27, 2022 at 13:06 | history | asked | Joachim Sauer | CC BY-SA 4.0 |