Viewing profile — rndomsrmn

Websites that use CNAME to forward their main domain to some tracking company, basically give their entire domain away, I don't see how that is a good secure way to track your user…

https://github.com/notracking/hosts-blocklists Use this for network wide blocking of all sorts of virtual garbage. Not only for safari, but all your locally connected devices.

You can get even better coverage with the NoTracking lists (dnsmasq/unbound or dnscrypt-proxy) https://github.com/notracking/hosts-blocklists They focus not only on tracking but al…

You might want to consider checking for hosts listed in https://github.com/notracking/hosts-blocklists This is an excellent merged blocklist, with public whitelist (oisd is fully c…

Also a ref to: https://github.com/notracking/hosts-blocklists They have a public whitelist and updates are pushed on a daily basis.

See: https://github.com/notracking/hosts-blocklists#dns-over-http... how Mozilla deals with this. For Chrome this feature seems not to be implemented, making it harder to control y…

It is possible to use this feature 'in' Pi-Hole, see: https://github.com/notracking/hosts-blocklists/wiki/Install-...

Dnsmasq 'address=' function is just a substr() call, which is as fast as 'normal' hostname blocking (host == "adhost.com"). No regex magic is required there. You are not able to bl…

regex is _extremely_ resource inefficient and should not be used with large sets of rules. Dnsmasqs domain redirecting feature (address=/adhost.com/#) is not supported by pihole. I…

dnscrypt-proxy is already supporting CNAME blocking and full domain based blocking (*.adhost.com), something that is still missing in Pi-Hole.

A dnscrypt-proxy setup with https://github.com/notracking/hosts-blocklists/tree/master/d... goes a long way! For anything that is not blockable on DNS level one should use uBlock O…

try hosting your own dnscrypt-proxy in combination with https://github.com/notracking/hosts-blocklists . That will turn off most trackers on your entire network.

You will know on forehand what the fixed DOH servers will be, how else would you be able to locate them? If for example they will use the 1.1.1.1 DOH instance, you can simply redir…

uBlock and uMatrix are a perfect addition to a setup with a dns based filtering system, though by themselves alone do not provide a solution for all use cases. Think smarttv's, con…

Mozilla added a feature to allow users to disable DOH network wide (also supported by the notracking list). Info from notracking: https://github.com/notracking/hosts-blocklists#dns…

You can also redirect those public dns servers on you router to your local Dnsmasq server with iptables.

Pihole does not make use of dnsmasq's build in option to block entire domains (address=/ads.com/::). This list is also optimized because hostnames that match a domain filter are no…

Or setup your own very lightweight filtering and caching DNS at home using Dnsmasq and https://github.com/notracking/hosts-blocklists/

Or https://github.com/notracking/hosts-blocklists that uses a dnsmasq feature to block full domains.

Or you just use a very basic dnsmasq installation and make use of a list like: https://github.com/notracking/hosts-blocklists that allows you to also block full domains. Been using…