pfSense running on dedicated PC.
It serves DHCP and DNS to all my machines on my LANs (I have multiple LANs to control multicast scope when dealing with devices that like to scan my networks). The DNS service hosts names in my local zone so that I can access all my local machines by name, and also resolves public zones using DNS servers of my choosing. I do not use the ISP's DNS servers.
nice, The dns queries that your router handles goes out on port 53 in plain text. ISP's sniff that and sell that data, even though you are using 1.1.1.1 or googles 8.8.8.8 for example. https://ipleak.net/ is a good place to check after setting up dns encryption.
good point! I was aware of secure DNS but haven't had the time to get into it yet. When I do I'm going to look into combining it with "unstoppable domains" and maybe create a couple for myself while I'm at it.
(post is archived)