Hacker News Reader

What, if anything, can be done about devices that hard-code DNS servers and get around your pi-hole?

You can force all port 53 traffic to your server.

There is nothing you can do about devices/apps that really want to use their own servers (DNS over HTTPS, pinned certificate), short of keeping them offline.

Is forcing all port 53 traffic to your pi-hole something that’s can be done on the pi itself? Are their any websites you could link to that would go into more detail?

You have to do this on your router, so it's model-specific. Searching "<your router model> Pi-hole redirect" will likely turn up something of assistance.

You'd do this on the router, or the unit providing NAT, which is probably not the Pi.

Cf. Edgerouter: https://www.reddit.com/r/Ubiquiti/comments/6lndq4/question_r...

Reply on news.ycombinator.com