How I Found and Blocked the Analytics on My Home Network
What this is: 29 days of my own DNS logs, cross-matched against 26 community lists, which named 1,723 telemetry domains this LAN actually hits. I enforced that set on the router instead of a 71,000-domain list. First ten hours: 3.0% of queries answered NXDOMAIN, nothing broken. Environment: GL.iNet GL-MT6000 on OpenWrt, dnsmasq owns :53. Security Onion sensor with Zeek on a mirror of the WAN link. Per-device DNS log pulled off the router. 26 lists for ground truth. Substitute your own. ...