Note that there are ISPs that actively hijack traffic to UDP port 53 further inside their network and transparently maps that onto their internal DNS servers.
replyThis is why you would want to setup DNS-over-TLS or DNS-over-HTTPS to, say, 1.1.1.1. They can’t hijack DNS traffic that looks like HTTPS traffic.
replyAnd if you can't disable DHCP or set the router in bridge mode, you can just add another router (that you control) between your ISP device and the rest of your network. I've been running this setup for over a decade and didn't run into any noteworthy issues. Leave the ISP-infested router outside your network.
replyPretty sure that you can use DHCP and still override the DNS servers with most DHCP clients.
replyYes but you need to do it MANUALLY on every client. Using the PIHOLE DHCP automate this and simplify the setup.
reply