Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Hierdie gesprek is in die argief. Vra asseblief 'n nuwe vraag as jy hulp nodig het.

Is it possible to run DNS requestets through DoT and not DoH

  • 4 antwoorde
  • 3 hierdie probleem
  • 20 views
  • Laaste antwoord deur Wedgewood

Wedgewood
Wedgewood
more options

I'm using a router based firewall to block some websites and for parental control. When I have Firefox Private Network active the firewall becomes useless and all DNS requests go through not matter what I have configured at the firewall level. I assume this is because Firefox uses DoH when Firefox Private Network is active. And therefore my firewall can't distinguish what is HTTPS traffic and what are DNS requests over DoT. Everything works again when I change the about:config network.trr settings back from DoH to DoT. But as soon as I activate Firefox Private Network the settings are automatically reversed back to DoH. Is there a way to use DoT instead of DoH with Firefox Private Network? It should be possible since the DNS requests are handled externally by Cloudflare and not necessarily send as a DoH request.

I'm using a router based firewall to block some websites and for parental control. When I have Firefox Private Network active the firewall becomes useless and all DNS requests go through not matter what I have configured at the firewall level. I assume this is because Firefox uses DoH when Firefox Private Network is active. And therefore my firewall can't distinguish what is HTTPS traffic and what are DNS requests over DoT. Everything works again when I change the about:config network.trr settings back from DoH to DoT. But as soon as I activate Firefox Private Network the settings are automatically reversed back to DoH. Is there a way to use DoT instead of DoH with Firefox Private Network? It should be possible since the DNS requests are handled externally by Cloudflare and not necessarily send as a DoH request.

All Replies (4)

kurth
kurth
more options

i cannot access all https.

Ballison
Ballison
more options

Hi Wedgewood,

Unfortunately, there is not a way to reconfigure FPN to force DoT instead of DoH at this time. I'm still looking into other workarounds for you, but have you considered using a Proxy Firewall to have both privacy protection and the ability to restrict access/block sites?

Ballison
Ballison
more options

kurth said

i cannot access all https.

Could you please elaborate more on the issue you're running into?

Wedgewood
Wedgewood Vraag-eienaar
more options

Ballison said

Hi Wedgewood, Unfortunately, there is not a way to reconfigure FPN to force DoT instead of DoH at this time. I'm still looking into other workarounds for you, but have you considered using a Proxy Firewall to have both privacy protection and the ability to restrict access/block sites?

Well that would be an option, but there are many drawbacks for a proxy firewall. It creates a bottleneck which slows down traffic and it limits network protocols support.