I have a default Debian 9 installed in minipc, which is forwarding packets further.
I wish to be able to block hosts via domains, means if any forwarded packet of DNS type has request for example of youtube.com, it should be dropped. I know there are methods to drop them within iptables rules, but it is not advised technique.
I am afraid that setting dnsmasq or bind wont work, since few computers has google's 184.108.40.206 DNS server hardcoded (Few IoT devices).
So is there a way to either:
- force DNS resolving via my dnsmasq/bind (so i can setup a blacklist)
- drop DNS request packets containing 'youtube.com' without iptables