How to make a private DNS server?

Question

linux

Good day! There is a VPS with a DNS server (Pi-Hole ad blocker).
How can I make dns private so that you can't just connect to it via ip ?
I tried using openvpn, but so far vpn is not needed.
Thank you!

Answer 1

If you cannot block access by ip address (since your home computer has a dynamic ip address?), then adequate isolation is possible only with vpn or a proxy server (look for the setting in the browser - proxy dns requests).
Why do you need to hide dns?

Answer 2

Everything is very simple, through iptables, prohibit connections to your DNS server from outside, and allow only local ones! Then through https://habr.com/en/post/81607/ make a tunnel

We build a tunnel from the world to the network.

this is a full-fledged VPN and if you use public / private key authorization, then the protection will be no worse than that of openvpn!

Answer 3

Firewall restrict access

Answer 4

Bind in the settings allows you to configure which ip to give answers.

Answer 5

knockd + iptables.
By default, calls to 53/udp are closed, opened for the IP of the client that called the knock.
SSH setup example:
https://www.the-art-of-web.com/system/port-knockin...