u/Red_Con_

Hey,

some of my network devices have a manually set static IP (not DHCP reservations). With ISC DHCP I only set a smaller DHCP range for dynamically assigned IP addresses (e.g. 192.168.1.30 - 192.168.1.220) so there was some space left for DHCP reservations and static IPs.

According to the docs Dnsmasq should however have DHCP reservations be a part of the DHCP range which in my case would include the static IPs as well (e.g. if I have a device with a static IP 192.168.1.225 and a DHCP reservation for 192.168.1.230 then expanding the DHCP range to include the reservation will obviously include the static IP too) and I'm afraid it could cause issues since I believe DHCP would not be aware of the IP being used in this case.

How do I handle this please? Assuming the devices cannot be changed to DHCP reservations and I would like to avoid having to change the static IPs.

Thanks!

Hey,

at this point it's well known that DNS ad blockers can't block YouTube's (or various streaming services') ads because they are served from the same domain like the actual content.

That begs the question why doesn't everyone serve ads this way if it's such an easy way to bypass DNS ad blockers?

Thanks!

Hey,

I'm currently using Unbound DNS with DoT on OPNsense and would like to block devices with hardcoded DNS from bypassing it. I found this guide and this guide and while some steps are the same, there are a couple of differences.

Both guides forward DNS (port 53) queries to local DNS and block known DoH servers but the first guide (for Pi-hole but arguably more popular) creates two extra NAT port forwarding rules:

1. Allowing the local DNS (Pi-hole) to reach external DNS servers
2. Preventing clients from giving unexpected source errors

The second guide doesn't do that but unlike the first guide it blocks port TCP/UDP 853 and UDP 443.

Which one of these approaches is correct? Do the extra port forwarding rules provide any value for Unbound? Is it advisable to block the 853 and UDP 443 ports?

Thanks!

A question for those selfhosting Pangolin

View Poll

Hey,

I was wondering if those of you who run Pangolin on a VPS host some other services on that VPS as well.

If you do then what is it? And is it possible to expose the other services through Pangolin just like the ones on your home network?

Thanks!

Hey,

I was wondering where you guys put your wired presence sensors when you are not able to run the cables behind a wall (e.g. in a rented apartment). I don't want to use a battery powered presence sensor but I don't want cables hanging off the ceiling either.

Thanks!

Hey,

I'd like to start using Paperless-ngx but I have a ton of documents and would like to find out whether there is a better and less cumbersome way to add them all than just scanning them with my phone one by one.

How did you guys do it? Is there a way to make adding all documents when starting out a bit easier?

Thanks!