I run a PiHole and have Quad9 as the upstream resolver instead of the ISP. That was pretty simple to setup as well. You can also do DNS-over-HTTPs and other options as well for content filtering to block malware and items of DNS upstream.
Creating websites for everyone. Check them out.
Currently running #linux doing #webdesign with #11ty
Writing for the #100DaysToOffload on claytonerrington.com
mastodon: @cjerrington
I run a PiHole and have Quad9 as the upstream resolver instead of the ISP. That was pretty simple to setup as well. You can also do DNS-over-HTTPs and other options as well for content filtering to block malware and items of DNS upstream.
Cloudflare DNS proxied dns to be exact too. They also allow DNS only which is not routed through Cloudflare and the services.
Changing ports isn’t a terrible thing, also not the perfect “fix” either, as you can still recognize open ports and scan the service on them.
Some ports are reserved in networking, so should stay away from those.
Some ISPs don’t allow you open ports on 80/443 as those are web hosting ports and they provide a service to consumers to download content from the internet, not for their consumer to be a web hosting provider as well. That’s at the residential level, if you have a business plan that might change, but it might be hard to convince and ISP otherwise.