¶ DNS and Firewall
Smithflix provides LAN DNS via Pi-hole and depends on router/firewall policy to prevent household admin services from being exposed incorrectly to WAN.
- Router/gateway:
192.168.0.1
- Pi-hole host bindings:
53/tcp, 53/udp
- Pi-hole UI:
8088
¶ Config and Data Paths
- Pi-hole configs live under
/srv/docker/pihole/*
- LAN clients can use Smithflix Pi-hole as a resolver
- WAN exposure for port
53 must be blocked upstream
- Router and local firewall details requiring privilege should be captured via a human-run privileged diagnostic script when needed
- Confirm Pi-hole UI at
http://<host>:8088
- Verify DNS listeners with
docker ps and host socket inspection
- Treat any public exposure of port
53 as a priority incident