IOS DNS Settings

  • Re: IOS DNS Settings

    My manually installed DNS profile that I installed Wednesday is still working 👍🏻


    by Grant Hostetler - 08:45 - 5 Dec 2020
  • Re: IOS DNS Settings

    Testing a manually installed profile again...


    by Grant Hostetler - 02:32 - 30 Nov 2020
  • Re: IOS DNS Settings

    What we (know) so far, 
    DNS over HTTS (DoH) doesn't work unless "Allow direct connection if PAC is unreachable" is enabled. (In the Global Proxy Payload)
    DoH DOES NOT in effect when installed from Jamf....per testing it doesn't matter if its uploaded as signed or created in Jamf... (Mine stayed in effect for over 24 hrs.. but when I restarted my phone it stopped working)

    DNS over TLS (DoT) does work with "Allow direct connection if PAC is unreachable" disabled (In the Global Proxy Payload)
    DoT does NOT stay in effect more than 24 hrs +/- when installed with Jamf.
    Does stay in effect when installed via Apple Configurator...

    Also a DNS Settings profile cannot be uploaded and saved to Jamf unless it’s already signed...


    by Grant Hostetler - 02:31 - 30 Nov 2020
  • Re: IOS DNS Settings

    No good results... I’m testing a signed DoH profile right now...


    by Grant Hostetler - 05:24 - 29 Nov 2020
  • Re: IOS DNS Settings

    Any results Grant?


    by Lynn Kropf - 02:14 - 29 Nov 2020
  • Re: IOS DNS Settings

    Another test in progress....


    by Grant Hostetler - 07:30 - 27 Nov 2020
  • Re: IOS DNS Settings

    Oops... my unsigned DoH profile isn’t staying in effect afterall... it was staying then I restarted my test device and now it not blocking Google Assistant or generating dns logs... 😕


    by Grant Hostetler - 07:03 - 27 Nov 2020
  • Re: IOS DNS Settings

    Interesting stuff!


    by Brian Kropf - 09:17 - 26 Nov 2020
  • Re: IOS DNS Settings

    Hi Emo 😎


    by Grant Hostetler - 08:10 - 25 Nov 2020
  • Re: IOS DNS Settings

    Hi Grant 😊


    by Emory Kempf - 08:08 - 25 Nov 2020
  • IOS DNS Settings Payload

    What we (know) so far, 
    DNS over HTTS (DoH) doesn't work unless "Allow direct connection if PAC is unreachable" is enabled. (In the Global Proxy Payload)
    DoH stays in effect when installed from Jamf....per testing it doesn't matter if its uploaded as signed or created in Jamf..

    DNS over TLS (DoT) does work with "Allow direct connection if PAC is unreachable" disabled (In the Global Proxy Payload)
    DoT does NOT stay in effect more than 24 hrs +/- when installed with Jamf.
    Does stay in effect when installed via Apple Configurator...


    by Grant Hostetler - 08:01 - 25 Nov 2020
  • Re: IOS DNS Settings
    Grant Hostetler invited Brian Kropf OH, Brian Kropf Admin to #IOS DNS Settings

    by Brian Kropf - 12:23 - 24 Nov 2020
  • Re: IOS DNS Settings
    Grant Hostetler invited Emory Kempf OH, Emory Kempf to #IOS DNS Settings

    by Emory Kempf - 12:23 - 24 Nov 2020
  • Re: IOS DNS Settings
    Grant Hostetler invited Lynn Kropf to #IOS DNS Settings

    by Lynn Kropf - 12:23 - 24 Nov 2020
  • Re: IOS DNS Settings
    Grant Hostetler invited Wilford Hostetler to #IOS DNS Settings

    by Wilford Hostetler - 12:23 - 24 Nov 2020
  • Re: IOS DNS Settings

    DoT vs DoH


    by Grant Hostetler - 11:50 - 23 Nov 2020

  • by Grant Hostetler - 02:59 - 22 Nov 2020