Hacker News Reader

That's very unkind. It probably took them a good long while to figure out that you did that, in the middle of troubleshooting something else. Why not just block that traffic?

People like you are the reason DoH is being rolled out. I hate the concept, but I would immediately enable it if I caught my IT unapologetically getting in the way of my work like you do.

They seemed to like it less when we blocked it, as their stuff completely failed to work.

Yes, but at least they immediately knew why.

Great when you debug something for ages, just to find out your company's DNS setup is broken. Because it can't be DNS, right? /s

Compliance sucks, but it's required. I didn't make up the rules, just implemented and enforced them.

Sorry, my snarkiness was not meant personal, I know you're not to blame :)

I had add port 53 NAT redirect to my home network.

Kindle Fire tablet has hard-coded Google's 8.8.8.8 DNS server, bypassing the Pi-Hole ad blocker.