this post was submitted on 11 Jan 2025
24 points (96.2% liked)

Selfhosted

53833 readers
217 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

  7. No low-effort posts. This is subjective and will largely be determined by the community member reports.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
 

I have a complex Tailscale-based network setup that includes blocking all Google hostnames. Unfortunately RCS on iOS doesn’t work when sending photos.

I’d like to set up a Tailscale App Connector using hostnames, but if they’re using IP addresses I can work with those as well (subnet routing).

I’ve scoured AT&T’s website and App Privacy Report on iOS (which doesn’t show DNS names for Messages, Phone apps) but I do know they switched to Google as their RCS provider at one point.

Update: Resolved by allowlisting rcs-copper-us.googleapis.com specifically, but I also added all of telephony.goog to unblock rcs.telephony.goog. A simple tcpdump got me the DNS requests for those domains.

top 13 comments
sorted by: hot top controversial new old
[–] ptz@dubvee.org 20 points 11 months ago* (last edited 11 months ago) (2 children)

RCS is a whole can of worms. It's presented like a carrier services (and carriers are in the mix, though often just for authentication), but it's really a Google service. With Android, RCS connects directly to google's mothership.

I believe on iOS those go to Apple's servers which "peers" with google. Maybe search the RCS endpoint for Apple and see what comes up?

[–] kalpol@lemmy.world 5 points 11 months ago (1 children)

Sooo Google is getting a taste of all MMS pics now?

[–] undefined@lemmy.hogru.ch 1 points 11 months ago

I found the domain names (edited the post) and essentially yes, it does route through their servers.

[–] undefined@lemmy.hogru.ch 5 points 11 months ago

Good point, I’ll be on the lookout for that.

[–] just_another_person@lemmy.world 11 points 11 months ago

Probably easier to just unblock Google, send some messages, then look at your filter logs to see where they are going.

Guarantee you'll run into issues when you hop towers or networks though.

[–] LlilL@lemm.ee 4 points 11 months ago* (last edited 11 months ago) (1 children)

This article has helped me tremendously over the last couple years resolving host and port issues. Unsure if RCS relations are in here but still could be a useful resource for you, especially after checking your logs. Apple Enterprise Networks

[–] undefined@lemmy.hogru.ch 1 points 11 months ago

I resolved the issue and edited the post.

[–] catloaf@lemm.ee 2 points 11 months ago (1 children)

What shows up on your block log when you try?

[–] undefined@lemmy.hogru.ch 1 points 11 months ago (1 children)

I’m blocking primarily with my self-hosted, non-logging DNS server (Unbound).

I might just use my travel router to MITM myself while Tailscale is disabled on the iPhone to glean more information that way.

[–] catloaf@lemm.ee 1 points 11 months ago (1 children)

Non-logging? Unbound supports logging.

[–] undefined@lemmy.hogru.ch 2 points 11 months ago (1 children)

It sure does, but I don’t log my family and friends’ queries so I’ll probably MITM myself using a travel router.

[–] azron@lemmy.ml 3 points 11 months ago (1 children)

Throw up a pihole container and it'll show you what is being queried pretty easily right on the dashboard.

[–] undefined@lemmy.hogru.ch 2 points 11 months ago

I resolved the issue and edited the post.