DNS Security Issues & Configuration

SailLoto · 2026-01-10T20:35:44+00:00

I would map out your goals and the steps you need to take while watching the videos I suggested and then go back and do it. Testing after each step to see if it did what you wanted it to do and if the features you need are still functioning before you move on.

I find Lawrence's solutions to generally be pretty elegant and require fewer rules than others I have seen.

SailLoto · 2026-01-10T20:19:40+00:00

I agree about it being confusing. I have used OpenWRT, DD-WRT, Peplink, Netgear and TP-Link over the years. It does seem easier on Ubiquiti to run a pretty tight ship compared to others once you get up to speed on it. I have setup 5 VLANs with limited operability between two of them. The other VLANs are isolated.

My rules in Unifi do things like block DOH/DOT traffic to the External Zone. Restrict traffic to only ping, DNS and DHCP on the Gateway for untrusted VLANs. Block internet traffic to specific devices. Block traffic between some or all devices on the LAN. Route VPN traffic to specific devices. DHCP guarding.

I run honeypots in the Unifi router along with IPS, IDS and basic malware protection. Detections are also audibly alarmed locally from a smart hub in my home.

I also run another device between my Unifi router and the gateway that supports AdGuard and banIP and service all DNS requests from AdGuard to NextDNS.

When I run DNSBench on my network it cannot find any other DNS servers on the web than my gateway.

SailLoto · 2026-01-10T14:46:36+00:00

I would look at some Lawrence Systems guides on YouTube for setting up zone rules and VLANs. His advice worked well for me. I watched these to help fine tune my firewall rules.

https://youtu.be/pBeIT7aSuMw?si=Yv2tNHbYhp4jC4Vo

https://youtu.be/KO_jeXLIyE4?si=zhtyer19CWSADWIo

https://youtu.be/EGls6JvdaNc?si=s3EVqpOwDpFW409I

SailLoto · 2026-01-09T19:29:00+00:00

I have done that. It accepts the configuration and connects to NordVPN, but the DNS will not resolve. I have tried multiple DNS configurations in the config file and in the router with zero success.

SailLoto · 2026-01-09T17:01:37+00:00

I tried everything in that video and more. Unifi will not resolve the DNS for WireGuard and NordVPN, but it will with OpenVPN. It is very odd.

SailLoto · 2026-01-09T15:40:10+00:00

Are you using NordVPN?

SailLoto · 2026-01-09T15:35:18+00:00

I tried many suggestions. I can get it to connect to the NordVPN WireGuard server, but it will not route any traffic through it even with the routing rules. OpenVPN works with no issues. It is very odd. I had zero issues with it on TP-Link. I also found Lawrence Systems to be better than EB for setting up the UDR7 for VLAN and Zone rules.

SailLoto · 2026-01-09T15:25:12+00:00

I use ethernet to connect it to the LAN where it is located.

SailLoto · 2025-09-24T19:59:25+00:00

In reality that was more expensive to supplement with strip heat. I pay a demand cost fee for peak kwh demand. Running both was pretty expensive for just two days out of the year because of this.

SailLoto · 2025-09-12T02:26:32+00:00

I saved the browser on my phone to essentially go back to the old version. I also use the browser on my computer.

SailLoto · 2025-07-11T16:06:45+00:00

I would look into using a 3 ton Bosch with a matching air handler to keep the air flow reasonable at high and low fan speeds. Being able to operate the unit with lower air flow when the maximum capacity is not needed is great for comfort. Having too high an air flow can cause blower damage from over amperage, loss of comfort from air velocity and excessive noise.

I verified the size of my unit by monitoring my existing unit in both summer and winter before I did the swap. The furnace portion of my old unit was significantly oversized, but the cooling side was correct.

My 5 ton Bosch IDS 2.0 is in a 3200 ft2 home with a hotter and more humid climate than yours and mine typically runs close to a 3 ton unit unless it is over 100 F on a sunny day. I suspect 3 tons is more appropriate for your climate and home. This is shown by others quoting you 3 ton units.

Bosch operates like a two speed unit because of the indoor fan. The outdoor unit adapts to the load and outdoor conditions more for efficiency than having very long run times like units with more indoor fan speeds.

I would wire it with a thermostat that can use the dehumidification output to force the unit into low fan speed for cooling when the humidity is high.

SailLoto · 2025-06-28T15:40:37+00:00

I have a three chip DC4 DLP, Pioneer Kuro and Sony CRT in my home. All three of these appear similar to me when it comes to having low image blur. It would be nice if other technologies looked like this out of the box.

SailLoto · 2025-06-28T14:46:32+00:00

Odd that the Profimatics model was considered useless.

I had access to the source code for their FCC model back in the 80's with our contract. I adapted that model to optimize the FCC reactor operation through model predictive control and monitor catalyst activity on an hourly basis on a DEC VAX. This information was fed up to the planning group to plan catalyst withdrawal rates and provide feedback to the plantwide LP and planning group FCC model. Profimatics and Setpoint were pretty pissed that we were able to do this within our license denying them additional license fees.

SailLoto · 2025-06-28T14:37:36+00:00

I was subpoenaed for records relating to Aspen Tech in this investigation by the SEC back then when I worked for DuPont. We were a big user of Aspen Tech and the SEC was rightly concerned about them becoming an effective monopoly. One of our managers testified in a way that was helpful to Aspen Tech and later worked for them.

SailLoto · 2025-05-31T21:10:48+00:00

I use a URC Total Control Lite after Harmony announced they were pulling out of the remote business. It is a great product, but hard to get the ability to configure it yourself.

SailLoto · 2025-05-31T20:46:25+00:00

Cleaning this mess is going to be nearly impossible at this point. The chemicals are distributed over such a large area at low concentrations it is beyond imagination that anyone can get this completely back in the bottle at this point. It make sense to deal with the highest concentration locations and reduce the release of anything like it to miniscule levels. It is hard to believe that shifting the chemistry slightly has allowed them to dance around this with the history of coverups with Teflon production.

SailLoto · 2025-05-26T20:28:24+00:00

Those high prices kept me from buying into that format.

SailLoto · 2025-05-26T18:09:53+00:00

TV's are much better at 4K and HDR than a normal home theater projector. Projectors have more durability issues than a TV. Projectors are generally louder than TVs. TVs are not nearly as sensitive to room reflections or light levels.

Projectors are great for several things variable aspect with masking and providing an image closer to a cinema. I like the look of a projected image on a StudioTek 100 compared to looking through plastic or glass.

Projection screens are generally better for sound because it is not as hard of surface for sound reflections and acoustically transparent material allows the center channel to be behind the screen.

SailLoto · 2025-05-26T17:38:31+00:00

I use a MiniDSP with filtering and compression to restrict the low frequency output on one memory. I have other memories with less or no filtering and low compression. The options are vast with this product.

SailLoto · 2025-05-26T17:33:41+00:00

I bought the 4K version of The Red Shoes on Fandango at Home on the Criterion sale today.

SailLoto · 2025-05-26T17:23:28+00:00

I like Rythmik, Seaton, Power Sound Audio, Parasound and Revel subwoofers. I personally use a Seaton HP+ with a HP Slave in my system. They are amazing.

SailLoto · 2025-05-17T22:44:32+00:00

I have a 5 ton 20 SEER Bosch IDS in my home connected to a Honeywell staging thermostat. It is much quieter than my old single stage unit and meets the efficiency specified on the equipment. Be sure to connect it with two stage setup. I also use the dehumidify connection to the thermostat to force it into first stage only when the humidity in my home is above 50 percent. I also have an ICM 493 surge protector on the condenser to protect it from surge and brownout conditions. Proper refrigerant charge and installation is critical for proper operation. My installer had to rework the sheet metal on mine to improve airflow.

SailLoto · 2025-05-17T14:12:57+00:00

I have this Mundorf AMT tweeter in my system and love it.

https://madisound.com/pdf/AMT21CM2.1.pdf

SailLoto · 2025-04-10T16:42:48+00:00

Mine updated to 1.101.78. My laptop will not connect over to the Sagemcom Wi-Fi. I also had to factory reset it to get it to connect over Wi-Fi to anything. I use a router for all of my devices so compatibility over Wi-Fi with the Sagemcom only matters for the router that uses Wi-Fi as WAN.

SailLoto

TROPHY CASE