I'm interested in verifying my pihole is secure and correctly set up

Help Community Help
1

Please follow the below template, it will help us to help you!

If you are Experiencing issues with a Pi-hole install that has non-standard elements (e.g you are using nginx, apache2 or another reverse proxy, or there is some other aspect of your install that is customised) - please use the Community Help category.

Expected Behaviour:

Secure on all devices and set up with firewall and all it needs correctly

Actual Behaviour:

Im looking for help on my pihole is secure, running correcrtly, and have the correct things installed e.g firewall and the settings used, etc. Basic security really and if the devices in my home is also running dns from pihole. TV, Desktop, wireless IoT like phones, tablets and if it is all secure. Im not sure if it is anything worng or not, but I just wanted to get it verified

Debug Token:

Replace this text with the debug token provided from running pihole -d

2

theres no real audit command for this, its mostly just checking a few things by hand. quick list of what actually matters: nothing forwarded from your router to the pihole box, especially not 53 or the web port. if port 53 is reachable from the wan you become an open resolver and youll get hammered. set the interface listening behaviour to local/lan only instead of permit all origins, thats in settings dns. put a password on the web interface even though its lan only. then open the query log and look at the client list, if you see a device you dont recognise or your tv doing thousands of queries thats your answer. also check nothing is bypassing you, plenty of tvs and android stuff ship hardcoded 8.8.8.8 or do dns over https, so block outbound 53 to anything except the pihole at the router and youll see it break. and run pihole -d, it flags most misconfig on its own, the token is fine to post here if you want someone to read it