Guest Network Pro Pi Hole

[bbunge]

Quick question, and apologies for the thread hijack.

With the above quoted Pi-hole configuration, if one is using (for example) Cloudflare DNS in WAN settings, should DNSSEC support be enabled?

DNSSEC can be enabled but is not necessary. It does provide DNS security but not encryption.

 

[bennor]

Quick question, and apologies for the thread hijack.

With the above quoted Pi-hole configuration, if one is using (for example) Cloudflare DNS in WAN settings, should DNSSEC support be enabled?

Generally, with the above described Asus router/Pi-Hole configuration, the clients DNS requests go through Pi-Hole not the router's WAN DNS servers (or any DNSSEC setting you have configured for the WAN DNS).

 

[Untried3868]

Generally, with the above described Asus router/Pi-Hole configuration, the clients DNS requests go through Pi-Hole not the router's WAN DNS servers (or any DNSSEC setting you have configured for the WAN DNS).

Right. This would only affect router reboots. I just wondered if it would be recommended or not.

Thanks for the replies.

 

[Untried3868]

DNSSEC can be enabled but is not necessary. It does provide DNS security but not encryption.

But it would ensure DNS responses are not hijacked, correct?