Got my own router. SO I have just a 3rd party modem I own that’s not a spectrum device, just a docsis 3.1 device compatible with spectrum. But no I haven’t set any transparent/bridge settings. That’s actually a good idea to check. I always think of the modem as invisible infrastructure but worth a look. Thanks!


Steve Thibault

On Aug 26, 2025, at 4:41 PM, Chuck Anderson <cra@fea.st> wrote:

Did you turn off any "security" features Spectrum has on the cable modem/gateway and put it into transparent bridging mode and use your own router?

On Tue, Aug 26, 2025 at 04:02:17PM -0400, steve--- via WLUG wrote:
Privacy. I don’t want one org, source, company knowing EVERY DNS query I make from my house and therefor every company, site, organization, service,…,etc that I use.

If I have a recursive DNS server that doesn’t go to one DNS forward like Spectrum, Google, Cloud flair, etc, server, but instead caches the root entries locally on initial startup for .com, .net, .bix, .org, etc, and then cache as I go the next level down, nobody ever when and what I query but once, and then that’s just the next level of the recurse, which is auto refreshed when the cache TTL runs out. So I keep as much of my digital data away from prying eyes as possible. As the IETF says in their specs, passive monitoring is an attack, and should reasonable measures should be taken to reduce or eliminate it.

Steve Thibault

On Aug 26, 2025, at 3:55 PM, Keith Wright via WLUG <wlug@lists.wlug.org> wrote:

Tim Keller via WLUG <wlug@lists.wlug.org> writes:

I've long since decided to avoid using my ISP's dns and went to
running PiHole with the upstream dns being 8.8.8.8 and 1.1.1.1

Tim.

Other than the hack value of doing it yourself,
is there a specific reason that you avoid ISP DNS?