My pi-hole is blocking 20% of all queries. Can we say that 20% of end-users internet traffic is for tracking and advertising ?
38.6% for me, guess YMMV based what you do on your devices
Pi-Hole 4.3.2
141–150 of 224 posts
Re: Pi-Hole 4.3.2
#142Earlier quoted context omitted.
What I'd really like is temporary whitelisting a single domain. Just because I need to use site X for a couple of minutes it doesn't mean I want the flood-gates open.
Wouldn't you have to whitelist multiple domains (30+ for theguardian.co.uk) for a feature like "reload without blocking"?
This is more for the case when a single JS file fails to load from a CDN or things like ReCaptcha.
Since it's an API, even if it would have been 30+ those could all still be approved with a single script call.
Re: Pi-Hole 4.3.2
#143Just recently I experimented going without my pi-hole or any ad blocker software for 4 weeks to see what would happen. My goodness the internet is a dumpster fire without it. So many pages lagging and slow to load. Things I wanted to click that jumped when an ad loaded resulting in miss clicks. Annoying things following me around. It was especially bad on mobile with the GDRP/Cookie notices and ad's to the point that…
Yep, my experience as well. There must be a better way. I think we're warming up for a war since browsers (Chrome and Safari at least) have slowly started making it harder to block ads, which I think will becoming a creeping normality.
DoH in Firefox will bypass your pihole too and have all your DNS data go to cloudflare to boot.
Re: Pi-Hole 4.3.2
#144Earlier quoted context omitted.
Separate VLANs is the right answer. Phoning home is not an Amcrest-specific thing, all of my cameras (I have a handful of Amcrest and D-Link cameras, and one Reolink camera) try to do that. I've put them all in a separate VLAN which can't access anything, not even DNS. The NVR software lives on a different VLAN and is able to open connections to the cameras for recording. This setup works perfectly. Most importantly,…
What access point do you use the offers VLAN functionality?
ASUS routers do too if you flash with Merlin https://www.asuswrt-merlin.net/
Re: Pi-Hole 4.3.2
#145Earlier quoted context omitted.
I agree that blocking OCSP (Online Certificate Status Protocol) servers is a bad practice. The argument to block them is that they can be used for tracking purposes. OCSP stapling is a great way to use OCSP without the risk of tracking - but not everyone does it or supports it. Anyways, I maintain an 'Ads & Tracking' blocklist that I believe is pretty reliable and you are welcome to give it a try if you like: https:/…
Sorry for my ignorance, but how could I load these into Pi-Hole?
No problem, there is a FAQ on it: https://discourse.pi-hole.net/t/how-do-i-add-additional-bloc...
Re: Pi-Hole 4.3.2
#146Just recently I experimented going without my pi-hole or any ad blocker software for 4 weeks to see what would happen. My goodness the internet is a dumpster fire without it. So many pages lagging and slow to load. Things I wanted to click that jumped when an ad loaded resulting in miss clicks. Annoying things following me around. It was especially bad on mobile with the GDRP/Cookie notices and ad's to the point that…
> My goodness the internet is a dumpster fire without it. So many pages lagging and slow to load. Yeah, people always knock pi-hole for not blocking "everything" like browser-based blockers do, but even though it's not perfect it still makes a huge difference. Due to some network changes I had to go without pi-hole for a couple days after having previously used it for years, and you never really appreciate how much c…
Is it still worthwhile to set up if I have ad blocking in all my browsers?
Re: Pi-Hole 4.3.2
#147The one thing that's holding me back on actually using Pi-Hole is the lack of flexibility. What I'd really like to see is the ability to do various things on a per-client basis. For example, one commenter wanted a simple "reload without blocking" functionality and the response was to use a bookmarklet plus the Pi-Hole API to disable it temporarily. This works, but the problem is that it disables it temporarily for ev…
I use two Max OS "Locations" (Apple Menu -> Location), one which uses the router default DNS (which is a Pi-Hole at home), and another which is set to use the Cloudflare DNS servers. This allows me to to switch location, and instantly reload a page without the Pi-Hole interfering. Of course this only works on my Mac.
Did you ever have issues with local DNS caching after switching location?
Did you ever have to run the following command to reset Apple's local DNS after switching?
sudo dscacheutil -flushcache
sudo killall -HUP mDNSResponder
Re: Pi-Hole 4.3.2
#148As the situation has worsened with the latest release of Safari I'm really interested to globally setup Pi-Hole on a VPS via docker and use it in combination with VPN (Strongswan) for all of my devices (also mobile). Has anybody had success with such a setup yet?
You could instead WireGuard split tunnel dns traffic and serve it with Pi-Hole or forward it to dns.aguard.com if you do not really require analytics or use unbound with block lists to resolve names recursively.
Have you managed to get WireGuard to do split tunnel DNS? I've been wanting to do this, but couldn't figure out how to make it work on Android, for example.
Re: Pi-Hole 4.3.2
#149Preface: I'm moderately technical but don't understand the specific nuances of DNS.
Is there any possibility Pi-Hole and the DNS server plus hosts file could be used in an attack? Could I setup a web server with identical UI to my target site, get one of the list providers to direct chase.com to my IP, list gets propagated to all Pi-Hole devices, and start collecting credentials?
Re: Pi-Hole 4.3.2
#150Donno if this is a silly question or not. But if there anywhere to buy a raspberry + pi with pi-hole pre-configured on it? I've wanted one for a while but just wanna plug it in and go to the web console, not buy it set it up install it etc.
All you have to do is run a script from the pi-hole website to install. It’s very effortless. Like.. literally effortless. If you’re posting here, I guarantee you could do it in no time. The “hardest” part is excluding an IP for the pihole & setting your DHCP server to serve that IP w/ new leases. Good luck dude.
Well to be fair, there's some effort in setting up the RasPi to begin with - flashing a memory card and installing the linux os flavor (which one?), etc. There's a lot of steps.
I'm a total newbie and figured it out, but didn't find it "effortless". Lots of instructions to follow.