91–100 of 254 posts
does anybody know how to properly secure the the DNS server from replay attacks with iptables. i have a pihone running on a cheap vps on internet, but i connect to it with a vpn and that's draining my smartphone battery. i want to be able to change only the dns settings and point to my pi-hole. but at that time the recommendation was to not run the dns part on the internet because it could be used for dns replay atta…
Is there a way to quickly disable/re-enable pihole for the network? With AdGuard DNS or uBlock Origin I still get into situations where occasionally they break a site completely and I have to temporarily disable the plugin (or switch to cell tower dns) to get the site working, so I’d want a quick way out of pi-holing traffic as well
> Is there a way to quickly disable/re-enable pihole for the network? Bookmark the following URL http://pi.hole/admin/api.php?disable=120&auth=PWHASH Replace PWHASH with the value of your WEBPASSWORD in setupVars.conf cat /etc/pihole/setupVars.conf | grep 'WEBPASSWORD=' | cut -c13- and '120' with the number of seconds you want to disable the Pi-hole filtering for.
Alternatively for MAX_lazyness and convenience I've been using https://nextdns.io , does all the same stuff and is the alternative to cloudflare in Firefox for DNS-over-Https (DOH)
Earlier quoted context omitted.
No additional hardware required, you can use it to provide some protection to your family without having to worry about remote access to the Pi-Hole to configure things, works for your devices on the go, cheaper than running pi-hole in the cloud yourself unless. Pricing wise it’s over 2 years worth of service for the price of an original Pi, a good SD card and a case. The only circumstances where Pi Hole is unquestio…
FWIW, pihole is not tied to any particular hardware. For example: https://github.com/pi-hole/docker-pi-hole
One should always have a spare Pi around.
This is more impressive than it sounds. My pihole currently uses about 25MB of RAM with over half a million blocked domains and around 20 clients.
Earlier quoted context omitted.
>I’m especially excited to see CNAME inspection. I was tired of trying to figure out what domains like “xuenl4v1szy8g.cloudfront.net” were doing. Is there a good explainer for CNAME inspection? I'm not finding anything good with my Google Fu.
Some ad agencies starting asking hosters to add a CNAME record to one of their domains. Let's say I have your own blog running on dastx.me, and I wanted some ads from adgiant.com. As an adblocker you've added `* .adgiant.com` to your blacklist and I'm an asshole and try to circumvent such adblocking measure. Them young millennials and their tech. Stealing me out of my money! So I go to adgiant.com and ask them if the…
cdn used to mean - serve the same static content all over the world and speed things up.
cdn now means - serve up different content to every single person and track them.
take a look at stack overflow and it's cdn.
Woohoo been waiting for this for months. I host pihole on a home server in a docker container and spend 5 mins a month just updating it. No other administration. Definitely use it to get rid of trackers and ads. (I should add that I also pay for about dozen publications/newspapers that I read frequently in lieu of not seeing ads)
Earlier quoted context omitted.
Protect it how exactly? You can create firewall rules on DigitalOcean and limit the IP addresses from which the DNS server is accessible.
that works only if you have a static ip home (which you usually don't have) or on your smartphone (which you don't have) > https://www.calyptix.com/top-threats/3-common-dns-attacks-an...
So I switched to AdGuard DNS on my devices.