• 0 Posts
  • 5 Comments
Joined 11 months ago
cake
Cake day: October 25th, 2023

help-circle


  • Yes. You will need to use firewall rules to allow the IPs of the desired services and then deny all other traffic to-from the TV.

    You’re challenge is that DDWRT only supports numeric IP addresses in its rules, and not Fully Qualified Domain Names(FQDN). So, for your current firewall, you will need to create a list of all the desired IP addresses and then create allow rules for each, or each subnet(range). You’ll need to update this list regularly as the individual IPs change semi-frequently.

    A Pi Hole might work but it would be prone to leakage, letting undesired traffic pass, and not block hard coded IPs.

    If you had a firewall that allowed you to use FQDNs in rules/policies then you could easily achieve your goal. there are several somewhat pricey commercial firewalls that can do FQDN policies. On the free side, pfSense/OPNsense can do FQDN policies using aliases. There may also be others that I am not aware of.