11–20 of 320 posts
Also, not sure how I feel about having this device as my primary DNS server for my entire internal network. What if the project gets compromised and injects a number of malicious DNS entries, now my entire network is toast?
curl -sSL https://install.pi-hole.net | bash
Yes, I know this is supposed to be a convenience thing, but I wish people wouldn't actively encourage this pattern.
+1 for pfSense port. Also, not sure how I feel about having this device as my primary DNS server for my entire internal network. What if the project gets compromised and injects a number of malicious DNS entries, now my entire network is toast?
I'm trying to find other services that are worth running in a similar fashion. Any ideas?
solution that doesn't require a dns server (or can be a dns server local cache) http://someonewhocares.org/hosts/ I add this to my modem/wifi ap. and then just let every device use it to resolve. if the device allows to set a hostfile, I also add a local copy for when iam not in my network.
I also add most Google/Facebook/etc domains to cut down on tracking and bandwidth from remote resources. Somehow the tentacles of Google (Analytics/Fonts/etc) and Facebook extend to most of the web. Their embedded javascript is everywhere. Blocking at the hosts file level seems to be the easiest and most convenient approach.
I just set this up at home yesterday (using an Odroid C2). A very pleasant experience so far. I'm trying to find other services that are worth running in a similar fashion. Any ideas?
Set up a cheap cloud hosted adblocker in an hour for $2.50 a month
https://news.ycombinator.com/item?id=13852109
Of particular added value there was mention of Android apps that can be setup to self-host an ad-blocking VPN / hosts filtering without rooting: https://news.ycombinator.com/item?id=13853408
https://github.com/M66B/NetGuard
NetGuard is the first free and open source no-root firewall for Android.
The installation shortcut given is curl -sSL https://install.pi-hole.net | bash and one is expected to execute this as root. Yes, I know this is supposed to be a convenience thing, but I wish people wouldn't actively encourage this pattern.
`curl -sSL https://install.pi-hole.net`
It's only 1400 lines of code.
At least it has TLS to prevent a MITM
The installation shortcut given is curl -sSL https://install.pi-hole.net | bash and one is expected to execute this as root. Yes, I know this is supposed to be a convenience thing, but I wish people wouldn't actively encourage this pattern.