this post was submitted on 11 Mar 2026
532 points (98.7% liked)
Technology
82518 readers
3964 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
If you are using a network level block, make sure it's a black hole and not just a DNS filter. I tried a DNS filter with a Roku and found that they bypass it with hardcoded values, even when the DNS server was statically assigned and DHCP assigned.
What you mean by black hole and filter? I blocked a bunch of tcl domains on my pihole and made my router drop everything in port 53 coming from every other device that wasn't pihole. It seems to have worked for now.. Is that a good solution?
Pi-hole blocks the name resolution. TV wants to go to Hisense.com, asks your Pi-hole where that site is. Your Pi-hole sees that Hisense is on a block list, so it says back to your TV "sorry, no idea how to get to that site, it must be offline."
If the manufacturer wants to get around this, they program a public DNS in, like 8.8.8.8, or they hardcode the static IP for their website into the TV. Now when it wants to go to Hisense, it never has to ask your Pi-Hole where that site is, and it doesn't get blocked. Heck, it probably won't even show up on your Pi-hole's logs.
If you black hole the site, then any traffic going out there gets dropped, and the hard-coded addresses on the TV don't matter for shit.
I don't think my tcl TV has it hardcoded because my pihole is always blocking tcl domains
![(https://media.piefed.social/posts/tU/o1/tUo1JxYy1qjG7g4.jpg)]
Your Pi-hole can only block the things that query DNS. Try this, ping a website you don't normally go to, and you should see that show up in Pihole log. Next, ping an IP, I usually pick on 8.8.8.8, and see if that shows up in your Pi-hole's logs. I'm fairly confident it won't.
Where can I find out more about black holing a site?
Best I can do is Google it and read it to you. I'm a little knowledgeable about how a pihole works since I have my Net+, and I've set up a few Pi-hole's (or the same one a few times tbh), but I'm definitely not a networking expert.
Yep, same issue with Firestick here.