Use RethinkDNS in different user profiles

Murcielago

I am thinking about using RethinkDNS. I want to use it to customize the DNS resolver with custom rules and blocklists. I also would like to use the integrated firewall to monitor and, if necessary, restrict Internet access from installed apps.

My current setup:

Owner Profile (only for distributing the apps)
Main (degoogled main profile)
Profile with apps that need google (GSF, Play Services and Play Store installed)

I am currently using a private DNS in the Owner Profile - these settings apply globally to all user profiles, if I am not mistaken.

My question is: Can I install RethinkDNS in the owner profile and use the DNS filter and firewall function from there or do I have to install the app in the corresponding user profile in which the apps that I want to monitor and, if necessary, block are installed?

Does anyone have any in-depth experience of using RethinkDNS? I have found quite little about it in the GrapheneOS forum, on YouTube and other forums.

lcalamar

Murcielago I know you aren't asking this specific question - but you may want to look into NextDNS over RethinkDNS.

As the routing is in your network settings - I'm not aware you could change these settings by user profile?

That said - I'm not sure I understand the use case regarding a separate DNS service by profile (doesn't mean there isn't one - just curious what it would be.

Murcielago

lcalamar

Thanks for the tip, NextDNS looks very promising - a DNS server with adblocker and I can even install individual blocklists. What I'm still missing is the fine-grained control of internet connections like with NetGuard - so I was thinking of RethinkDNS as a combination (with some cutbacks) of NextDNS and NetGuard or TrackerControl in one app.

That said - I'm not sure I understand the use case regarding a separate DNS service by profile (doesn't mean there isn't one - just curious what it would be.

I would actually prefer to install it in the Owner Profile and use it to filter/customize the network traffic of all my profiles from there. I'm not sure if this is possible - as I only download the apps in the owner profile and then distribute them to the corresponding user profiles. In addition, - if I'm interpreting it correctly - with RethinkDNS I would always have to let the app establish a connection in the user profile and then switch to the owner profile to view and block the parts of the network traffic that I want to filter. So I would have to constantly jump back and forth between the profiles to customize. This is of course easier with NextDNS, as I could simply monitor the traffic from another device. I'm still undecided what to do - but thanks for the tip!