Expected Behavior:
Am I right to assume that I should only see my router IP and localhost as top clients if I have my router's DNS sever set to my RPi?
Actual Behaviour:
A Comcast address is listed in my top clients list. Does this mean that comcast is pinging my DNS server from outside of my local network?
Listed on top clients are:
— My Router Local IP
— LocalHost
— Comcast: c-xxx-xxx-xxx-xxx.hsd1.nm.comcast.net
Debug Token:
mii35s9a66
Mcat12
August 2, 2017, 2:11am
2
You don't have the Pi-hole accessible from the internet? I don't think I've seen this before, so I'd check with Comcast.
As far as I know no. I have it behind a firewall. I am forwarding ports for some services like SSH and OpenVPN but not to make the DNS available to the internet. Should I be concerned for any kind of security risk?
Mcat12
August 3, 2017, 5:58pm
4
Have you secured your SSH port? If you're hosting a VPN, you should log in through that instead of forwarding SSH directly.
I can try disabling port forwarding on SSH. But if I remember right I was still seeing Comcast showing as a client before I enabled SSH
Not yet. To be honest I don't have a lot of confidence they will be familiar with this particular question haha
1 Like
i have this also ... any findings?
drewski
December 18, 2019, 2:24am
9
Do the request look somewhat familiar?