DNS over HTTPs

[dond]

Good morning!

This issue that I want to discuss here may already be something outdated and discussed. Today, watching a video by Marcelo Coutinho, he demonstrates using FireFox 60 how to do a baypass using DNS over HTTPS. Today,

nxFIlter already has a way to prevent this type of access????

Because even with pfSenese blocking any DNS and redirecting everyone through nxIFlter, access is still possible.

[support200]

Which DoH URL does he use in the video? Or can you link the video for me?

[dond]

of course

This is the video

https://www.youtube.com/watch?v=vSCI0YrPueY

[dond]

The video is in Brazilian Portuguese

[support200]

These DoH URLs have domains to be resolved first. We block most DoH servers at default. I don't think you can bypass NxFilter with DoH if you use the default Cloudflare DoH servers. You also can block it by GPO if you use Active Directory. There will be some documents about that in the internet.

[dond]

Thanks for the clarification. I also have TXT lists of DoH URLs, but I will also look at this option of not allowing changes in browsers via GPO. Thanks!