Live data from Hacker News

Maza – Like Pi-hole but local and using your operating system

github.com

81–90 of 138 posts

Re: Maza – Like Pi-hole but local and using your operating system

#81

Earlier quoted context omitted.

Another PiHole pro is that it can work for every device in your house (if you set it up that way).

You could also setup PiVPN[1] on the same Raspberry Pi running Pi-hole with Wireguard and setup all your mobile devices to automatically connect back home when they're off the home wifi.I've had this setup running for a couple of months now and couldn't be happier with it. [1]: https://github.com/pivpn/pivpn

I am using pihole and WireGuard. How did you set it up so that you automatically connect back home when you are off your home network?

Re: Maza – Like Pi-hole but local and using your operating system

#82
post #63

Earlier quoted context omitted.

> setup multiple profiles that lets me have strong parental control configuration for kids I've been using it too, but I've found nextdns go down from time to time. How are you dealing with explaining how to change the DNS setting to people at home because "internet doesn't work"? I wish DoH client implementations had support for primary and secondary endpoints [0]. I've seen people straight up uninstall DoH clients…

> How are you dealing with explaining how to change the DNS setting to people at home because "internet doesn't work"? I may be mistaken here but I thought the reason almost all operating systems allow you to specify more than one DNS is in case the primary one goes down. So if you specify NextDNS as the primary and say, Google or whatever, as the secondary: you likely won't see downtime (but obviously the filtering…

That doesn't always work, because servers aren't always used in strict order.

For example, my default Kubuntu 19.10 installation flips the primary and secondary if the primary is unresponsive for a while. Since my laptop takes a moment to establish a WiFi connection upon waking up, it always decides that the primary server is down and to default to the secondary server. It has currently been 3½ hours since my laptop queried its primary server and it has queried the secondary server over 1000 times in the past 24 hours despite the primary having 100% uptime.

Most stub resolvers have an option to use strict order, but you can't rely on it as a network admin.

Re: Maza – Like Pi-hole but local and using your operating system

#83
post #53

Earlier quoted context omitted.

A lot of websites (news sites especially) detect in-browser ad blockers and urge users to whitelist the site before continuing to read the article. This is a good workaround for that use case.

No, the websites detect that a resource wasn't loaded which triggers the annoying stuff. This happens with a pihole, adblocker, maza, or plain ol' hosts file. Ad blockers aren't magic.

In fact it's a good argument for using in-browser adblockers, since in-browser adblockers are capable of blocking such nag screens whereas DNS-based ones are not

Re: Maza – Like Pi-hole but local and using your operating system

#84
post #83
post #53

Earlier quoted context omitted.

No, the websites detect that a resource wasn't loaded which triggers the annoying stuff. This happens with a pihole, adblocker, maza, or plain ol' hosts file. Ad blockers aren't magic.

In fact it's a good argument for using in-browser adblockers, since in-browser adblockers are capable of blocking such nag screens whereas DNS-based ones are not

Agrees. Also, in-browser adblockers can do much more than a DNS-based adblocker. Such as removing dom element, injecting css to fix websites...

Re: Maza – Like Pi-hole but local and using your operating system

#85
post #13
post #10

Earlier quoted context omitted.

yes, but you have pihole for that... this is if you don't need or want to issue a network wide block

i couldn't think of an use case for this? can you explain what would you use this for? if you already have pihole?

A laptop you take to work?

Re: Maza – Like Pi-hole but local and using your operating system

#87
Or if you already run dsnmasq you can:

- uncomment this in your dnsmasq.conf:

        addn-hosts=/etc/banner_add_hosts
- put this in a file in /etc/cron.daily:

        wget -O /etc/banner_add_hosts 'https://pgl.yoyo.org/adservers/serverlist.php?showintro=0&mimetype=plaintext'

Re: Maza – Like Pi-hole but local and using your operating system

#88
post #82
post #63

Earlier quoted context omitted.

> How are you dealing with explaining how to change the DNS setting to people at home because "internet doesn't work"? I may be mistaken here but I thought the reason almost all operating systems allow you to specify more than one DNS is in case the primary one goes down. So if you specify NextDNS as the primary and say, Google or whatever, as the secondary: you likely won't see downtime (but obviously the filtering…

That doesn't always work, because servers aren't always used in strict order. For example, my default Kubuntu 19.10 installation flips the primary and secondary if the primary is unresponsive for a while. Since my laptop takes a moment to establish a WiFi connection upon waking up, it always decides that the primary server is down and to default to the secondary server. It has currently been 3½ hours since my laptop…

Just remove the second nameserver from the config. In my experience you can just leave the second DNS server field blank on most (all?) devices.

Re: Maza – Like Pi-hole but local and using your operating system

#89
post #8

Earlier quoted context omitted.

what is private DNS?

My explanation was wrong... Google support page explation for private DNS doesn't explain anything. Just recommends leaving it on.

they recommend leaving it on because then all your dns queries go to google and no one else by default--their "private dns" defaults to the very unprivate google dns servers.

Re: Maza – Like Pi-hole but local and using your operating system

#90

Earlier quoted context omitted.

Another PiHole pro is that it can work for every device in your house (if you set it up that way).

You can also splurge and for under $10/mo set it up on a DigitalOcean (or similar) cheap hosting provider and have it available everywhere. And you can share with friends and family.

The cost in your example is far, far more than $10 USD a month. If you can set this up, your time is absolutely worth something and even if this is your area of expertise, you are now personally responsible for a critical piece of your internet browsing infrastructure.

There are tons of important details to keeping a critical service up and running almost all the time - even if you are competent in this, that is still time every month making sure it's running, secure and functional.

The only reasons in my opinion to DIY a solution would be a) learning, hobby or for fun or b) you have requirements that can't be met another way, like privacy goals.

Post reply on HN