DNS-over-HTTPS help

[anwin (Andreas Winkler)]

I have a question: what exactly is being blocked here, and can someone explain it to me in simple terms? I’m a bit confused because I noticed Cloudflare and Google on these lists.

I had some issues with my Microsoft account before, and only after I disabled this setting in the DNS firewall did everything start working again, little by little. And since I don’t quite understand what this DNS-over-HTTPS does, maybe someone can help me.

Translated with DeepL.com (free version)

[bloater99 (Tim Zakharov)]

DNS-over-HTTPS Category

Yes, Bernhard is right, they are somewhat two different things. Redirecting DNS is good practise so that you will always receive and therefore be able to filter to any DNS queries. Any clients that are using DoT or DoH directly will circumvent this as those protocols are designed for that. So what I would do on my network is to enable the DoH category but only for GREEN (and BLUE if you are using that). That way, you can still use DoT to connect to your upstream providers, but your clients can…

[hvacguy (Shaun HVAC)]

@anwin

what this DNS-over-HTTPS

DNS is in clear text for the world to see. this is over port 53

DNS over TLS is encrypted DNS over port 853

DNS over HTTPS is DNS that is pretending to be encrypted web traffic to Circumvent ease droppers and filtering by hidding with web traffic.. Commonly used by mobile devices, that may be using public wifi.. One side affect is the DNS provider will get a finger print from your device asking for DNS over HTTPS ( DoH ). But for the most part it does a good job of circumventing being filtered. This does by no means protect you from Man in the middle Attacks. But None can. sometimes they call secure DNS on you mobile, strait to the mother ship. hope that helps.