Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Pi-Hole 4.3.2

pi-hole.net

Post reply on HN
Print view View original

71–80 of 224 posts

Re: Pi-Hole 4.3.2

#71

Post by theandrewbailey »

benplumley wrote: post #60
guilhermetk wrote: post #43

Earlier quoted context omitted.

Go for it, it's really worth the effort, even if it is a small one, with the bonus of being fun (at least for me it is). I can't imagine setting up my home network without pihole, and I'm considering setting it up at work, I manage a small network with 100 devices connected to the internet.

Can a Pi really keep up with that size of network or would you run it on more powerful hardware/a VM?

DNS is a very light protocol. In addition, responses tend to be cached, so it's not like the Pi would be hit with a dozen queries on literally every page load for every client on the network.

Re: Pi-Hole 4.3.2

#72

Post by asymmetric »

apexalpha wrote: post #51
asymmetric wrote: post #13

I spent some time implementing a Pi-hole module for NixOS, but eventually decided to go for a much simpler setup: dns server (dnsmasq or unbound) + periodically updated hosts file (via systemd timer) passed to the dns server. At the end of the day, that’s really all you need as a technical user, so I couldn’t justify he rest of what came with pi-hole, which I believe targets a less tech-savvy crowd. YMMV and I’m very…

>dns server (dnsmasq or unbound) + periodically updated hosts file (via systemd timer) passed to the dns server. This is what Pihole is... All extra is just default blocklists, API access, dashboard with stats and settings.

I invite you to look at the codebase more closely. Pi-hole is a fork of dnsmasq (FTL), a PHP web app, and a python web application, plus a bunch of shell scripts.

Compared to what I linked above, there's really no comparison in terms of simplicity.

Re: Pi-Hole 4.3.2

#73

Post by Moru »

Mister_Snuggles wrote: post #35

The one thing that's holding me back on actually using Pi-Hole is the lack of flexibility. What I'd really like to see is the ability to do various things on a per-client basis. For example, one commenter wanted a simple "reload without blocking" functionality and the response was to use a bookmarklet plus the Pi-Hole API to disable it temporarily. This works, but the problem is that it disables it temporarily for ev…

I had similar thoughts about it but I got fed up a couple of years ago and just installed it. If something doesn't work I will think about if I can live without it. Most of the time I can, and if not I just whitelist the domain.

If you want to temporarily disable it for your computer, maybe switch DNS temporarily? Might even be some plugin for that in the browser?

Re: Pi-Hole 4.3.2

#74

Post by apexalpha »

I'm a huge fan of this project! I have 3 set-up right now.

One as container on my Nuc at home for myself, and 2 other on old Pi's (one is a 1st gen B model) for family. A simple cron job to run every 2 months keeps everything up to date. For myself I use Wireguard to only forward DNS packets to the PiHole when I'm outside the house.

If you install a PiHole (and maybe Unchecky.com) your help desk calls from family will drop by 90% (personal experience).

Re: Pi-Hole 4.3.2

#75

Post by douglasfshearer »

Mister_Snuggles wrote: post #35

The one thing that's holding me back on actually using Pi-Hole is the lack of flexibility. What I'd really like to see is the ability to do various things on a per-client basis. For example, one commenter wanted a simple "reload without blocking" functionality and the response was to use a bookmarklet plus the Pi-Hole API to disable it temporarily. This works, but the problem is that it disables it temporarily for ev…

I use two Max OS "Locations" (Apple Menu -> Location), one which uses the router default DNS (which is a Pi-Hole at home), and another which is set to use the Cloudflare DNS servers.

This allows me to to switch location, and instantly reload a page without the Pi-Hole interfering. Of course this only works on my Mac.

Re: Pi-Hole 4.3.2

#76

Post by timw4mail »

bwilliams18 wrote: post #59
mantesso wrote: post #52

Earlier quoted context omitted.

You don't even need to buy the latest model. I've been running mine in a Pi Zero for +2 years without any problem.

I'd suggest getting an RPi with an ethernet port, I've got mine running on an original Raspberry Pi.

I tried setting up a 3B+ with pi-hole, but I think it was overheating...I had it set up on a first-gen Pi, and it still works great.

Re: Pi-Hole 4.3.2

#77

Post by apexalpha »

asymmetric wrote: post #72
apexalpha wrote: post #51

Earlier quoted context omitted.

>dns server (dnsmasq or unbound) + periodically updated hosts file (via systemd timer) passed to the dns server. This is what Pihole is... All extra is just default blocklists, API access, dashboard with stats and settings.

I invite you to look at the codebase more closely. Pi-hole is a fork of dnsmasq (FTL), a PHP web app, and a python web application, plus a bunch of shell scripts. Compared to what I linked above, there's really no comparison in terms of simplicity.

You literally said: "dnsmasq + periodically updated hosts file".

That is what PiHole, in its core, is!

The rest is just for the webserver, dashboard and API. You don't really need that. Sure, you're solution requires less code but I don't think it's easier to setup or manage.

Re: Pi-Hole 4.3.2

#78

Post by geggam »

lifty wrote: post #64
Mister_Snuggles wrote: post #37

Earlier quoted context omitted.

Separate VLANs is the right answer. Phoning home is not an Amcrest-specific thing, all of my cameras (I have a handful of Amcrest and D-Link cameras, and one Reolink camera) try to do that. I've put them all in a separate VLAN which can't access anything, not even DNS. The NVR software lives on a different VLAN and is able to open connections to the cameras for recording. This setup works perfectly. Most importantly,…

What access point do you use the offers VLAN functionality?

I built my own with OpenBSD to get this and other functionality

Not to mention the cool toys you can setup to see what is happening

https://undeadly.org/cgi?action=article;sid=20140228093820

Re: Pi-Hole 4.3.2

#79

Post by tombrossman »

jannes wrote: post #34
glaberficken wrote: post #24

Now what i really want is a universal gdpr-cookies-prompt killer. Does that exist?

Yes! Activate the "annoyances" lists in uBlock Origin. I believe many of them are off by default. "AdGuard Annoyances" or "Fanboy's Annoyance List" and "Fanboy's Cookie List" should do the trick. However, I recommend enabling "Ignore generic cosmetic filters" in order to not load giant stylesheets into every single page.

See also https://www.i-dont-care-about-cookies.eu/ for a larger and more specific blocklist.

I found it worked better for me because the annoyances list was too broad and blocked too many legitimate page elements, such as the containing the play button for NPR podcasts.

Re: Pi-Hole 4.3.2

#80

Post by asymmetric »

apexalpha wrote: post #77
asymmetric wrote: post #72

Earlier quoted context omitted.

I invite you to look at the codebase more closely. Pi-hole is a fork of dnsmasq (FTL), a PHP web app, and a python web application, plus a bunch of shell scripts. Compared to what I linked above, there's really no comparison in terms of simplicity.

You literally said: "dnsmasq + periodically updated hosts file". That is what PiHole, in its core, is! The rest is just for the webserver, dashboard and API. You don't really need that. Sure, you're solution requires less code but I don't think it's easier to setup or manage.

> The rest is just for the webserver, dashboard and API. You don't really need that. Sure, you're solution requires less code but I don't think it's easier to setup or manage.

I think this really depends on who you are. For me, using a systemd timer and a systemd service is easier than the set of ad-hoc solutions Pi-hole uses. For someone else, probably Pi-hole is easier. That was my point in the OP.

Post reply on HN