Post #4383462
2026-08-04 17:06 UTC
@badsamurai@infosec.exchange Direct to IP means it can bypass DNS? So if you have a pi hole that is enforcing DNS on the network to drop the IPil, it still goes through?
If that's true, I have some very large misunderstandings about home router networking.
Replies (1)
-
@syn_rst@norden.social 2026-08-04 18:43
@fullywoolly@mastodon.social @badsamurai@infosec.exchange Direct2IP means it doesn't need DNS at all, because it already knows the IP-Address it needs/wants to talk to. So, unless your PiHole _also_ blocks certain known malicious IP-Addresses or -networks (or entire AS for that matter) the DNS blocklists, or enforcing the PiHole's DNS server makes exactly zero difference for that type of malware.