you are viewing a single comment's thread
view the rest of the comments
[–] 10 points 4 months ago (4 children)

The correct answer is VLAN/MAC jail or no connection.

Even DNS blocks won't stop persistent tracking which often has fallback IPs.

Isolate it and only allow the domains you need.

  • source
  • hideshow 4 child comments
  • [–] 1 point 4 months ago (3 children)

    Not the correct answer, because the defective products will start bugging you about lack of connectivity, and eventually can stop working.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 2 points 4 months ago (2 children)

    Isolate it and only allow the domains you need.

    "*" match solves lazy domain matching and smart TV OEMs would be getting lawsuited if they failed to function without an internet connection when HDMI input is provided.

  • source
  • parent
  • hideshow 2 child comments