I built my own router with a raspberry pi. I installed pi-hole and use that as a dns resolver. I then use an iptables rule to NAT / forward all dns traffic on port 53 to the pi-hole resolver, similar to how ISPs often intercept dns requests. This prevents IOT devices from bypassing the dns server configured via my DHCP. Letting pi-hole block the requests helps prevent errors from dns request timeouts. An additional b…
Is there anything to stop devices from establishing a VPN connection? I imagine that would be the next logical step that device manufactures will go to to combat consumers setting up pi-holes.
You could stop the device from initiating a tunnel by blocking the appropriate ports and protocols.
Although if I found out a device was going to these lengths and wasn’t open source, I don’t think I’d want it on my network.