Pi-Hole 4.3.2 • Hacker News Board

Re: Pi-Hole 4.3.2

#221

Post by kelnos » Thu, Sep 26, 2019, 8:44 PM UTC

paulcole wrote: post #211

danijelb wrote: post #210

Earlier quoted context omitted.

Is it ok to skip ad pages in printed magazines? Or to switch a TV channel during commercials?

Yes, it’s fine to skip ads in magazines or change the channel during commercials. It’s not OK to get a robot that changes the channel for you or to have your magazines sent to a service who cuts the ads out and forwards them on to you.

You're setting arbitrary restrictions based on some feel-good criterion you've developed for yourself.

The implication of your ethical argument was that avoiding ads causes the content creator to fail to get paid, and that's wrong.

There's no material difference between whether I avoid ads manually, or have software do it for me automatically. The end result is the same; the creator misses out on ad revenue. You can't cherry-pick the ad avoidance methods and say some are ethical and some are not when the supposed unethical act is depriving creators of payment.

Re: Pi-Hole 4.3.2

#222

Post by PureParadigm » Fri, Sep 27, 2019, 5:12 AM UTC

ignoramous wrote: post #164

PureParadigm wrote: post #148

Earlier quoted context omitted.

Have you managed to get WireGuard to do split tunnel DNS? I've been wanting to do this, but couldn't figure out how to make it work on Android, for example.

Since wireguard uses allowed-ips for making routing decisions, it has been straightforward to set one up. The gist is, on the client configuration: 1. Set DNS server IP against allowed IP in the peer (which is your wireguard server) section. 2. Set DNS entry to the same IP as above for the client interface. Ref the discussion and the linked blog post (that talks abt Pi-Hole with wireguard): https://news.ycombinator.c…

Thanks for your answer. I think the sources you linked to are tunneling all of their DNS queries through Wireguard. I don't want to do this, since my work has some DNS records which only resolve internally. Basically I want to be able to give DNS names to the various hosts on my Wireguard network, while falling back to the DNS provided by the network I'm on.

Re: Pi-Hole 4.3.2

#223

Post by ignoramous » Fri, Sep 27, 2019, 6:39 AM UTC

PureParadigm wrote: post #222

ignoramous wrote: post #164

Earlier quoted context omitted.

Since wireguard uses allowed-ips for making routing decisions, it has been straightforward to set one up. The gist is, on the client configuration: 1. Set DNS server IP against allowed IP in the peer (which is your wireguard server) section. 2. Set DNS entry to the same IP as above for the client interface. Ref the discussion and the linked blog post (that talks abt Pi-Hole with wireguard): https://news.ycombinator.c…

Thanks for your answer. I think the sources you linked to are tunneling all of their DNS queries through Wireguard. I don't want to do this, since my work has some DNS records which only resolve internally. Basically I want to be able to give DNS names to the various hosts on my Wireguard network, while falling back to the DNS provided by the network I'm on.

In the config:

DNS = ,

...wouldn't work?

Edit: per discussion on r/Wireguard, looks like one soln is to run dnsmasq locally on ::53 and forward public queries to the VPN/DNS provider of your choosing and resolve private queries locally.

https://www.reddit.com/r/WireGuard/comments/cmhap6/use_both_...

Re: Pi-Hole 4.3.2

#224

Post by PureParadigm » Sun, Sep 29, 2019, 2:45 AM UTC

ignoramous wrote: post #223

PureParadigm wrote: post #222

Earlier quoted context omitted.

Thanks for your answer. I think the sources you linked to are tunneling all of their DNS queries through Wireguard. I don't want to do this, since my work has some DNS records which only resolve internally. Basically I want to be able to give DNS names to the various hosts on my Wireguard network, while falling back to the DNS provided by the network I'm on.

In the config: DNS = , ...wouldn't work? Edit: per discussion on r/Wireguard, looks like one soln is to run dnsmasq locally on ::53 and forward public queries to the VPN/DNS provider of your choosing and resolve private queries locally. https://www.reddit.com/r/WireGuard/comments/cmhap6/use_both_...

Yeah, thanks for looking deeper into it. I found before that I could do it by running my own DNS server (like dnsmasq) on the local device (so I could do it no problem on my laptop), but that isn't easy on a phone.