Pi-hole 5.0 • Hacker News Board

Re: Pi-hole 5.0

#151

Post by syphilis2 » Mon, May 11, 2020, 6:31 AM UTC

I like Pi-hole, but

pi@pihole:~ $ pihole -up

  [i] Checking for updates...
  [i] Pi-hole Core:     up to date
  [i] Web Interface:    up to date
  [i] FTL:              up to date
  [] Everything is up to date!

pi@pihole:~ $ pihole -v

  Pi-hole version is v4.4 (Latest: v5.0)
  AdminLTE version is v4.3.3 (Latest: v5.0)
  FTL version is v5.0 (Latest: v5.0)

Re: Pi-hole 5.0

#152

Post by Doxin » Mon, May 11, 2020, 6:31 AM UTC

fulafel wrote: post #134

PSA: A RPi running Pi-hole is not a fire-and-forget item. The networked software on it, including pi-hole, sometimes has security holes discovered and exploited, and has to be kept up to date. See eg https://natedotred.wordpress.com/2020/03/28/cve-2020-8816-pi... & https://www.reddit.com/r/pihole/comments/73tvdq/cve201714491... & https://www.cvedetails.com/vulnerability-list.php?vendor_id=... (afaik Pi-hole is built…

Setting up automatic updates is probably a good idea.

Re: Pi-hole 5.0

#153

Post by jve » Mon, May 11, 2020, 6:32 AM UTC

8589934591 wrote: post #149

Can someone please explain how exactly does this work? So I have an ubuntu system. Is it ok to just install it in my local system alone and use it? Or should I be doing something to connect to a modem or something? I currently use my phone as the hotspot for my computer. If I install it say in a remote server in digital ocean, how can I use my phone/computer to use pi hole? Still a noob when it comes to networking so…

Not an expert with PiHole other than having set-up one myself not so long ago.

It is a DNS server. Basically whatever you put into DNS Server list on your device (some host on local network, some host with public IP) - your device will send DNS queries to THAT host.

More often than not, you will configure your router to hand out your local devices these DNS servers via DHCP.

So that answers the question: you can host it on local network or use remote server (given you have public IP and can open port 53/UDP). If you don't have firewall there, you will probably be configuring host local firewall to allow using DNS from hosts@home. It may get complicated if you have a dynamic address for your home router.

Re: Pi-hole 5.0

#154

Post by IntelMiner » Mon, May 11, 2020, 6:35 AM UTC

Cross-posting from my comment on Reddit's /r/Linux

I'm a little disappointed that they seem to be very uninterested on how to get it working on "unsupported" configurations

My x86 gateway currently runs on Gentoo (PFsense kept having random crashing issues) and it's something I'd love to add to it

as far as I can tell all Pi-Hole needs is

- Lighttpd + PHP (web management portal)

- DNSMASq (DNS)

- DHCPD (DHCP)

- git (blocklist updates?)

There was a single github issue tracker where someone got it working fairly easily (essentially saying "please install package X/Y/Z" during setup) which was closed by the developer as "only two people have asked about Gentoo"

I know Gentoo is fairly niche as far as distributions go, but seeing popular software moving away from "here's how to compile/install it" to "here's a docker container/here's what "we" support" is very disheartening

Re: Pi-hole 5.0

#155

Post by RussianCow » Mon, May 11, 2020, 6:43 AM UTC

GekkePrutser wrote: post #129

dastx wrote: post #42

Earlier quoted context omitted.

Some ad agencies starting asking hosters to add a CNAME record to one of their domains. Let's say I have your own blog running on dastx.me, and I wanted some ads from adgiant.com. As an adblocker you've added `* .adgiant.com` to your blacklist and I'm an asshole and try to circumvent such adblocking measure. Them young millennials and their tech. Stealing me out of my money! So I go to adgiant.com and ask them if the…

Thanks! I hadn't heard of this method. One question though: What will prevent the ad providers from asking their customers to add an A/AAAA record to one of their IPs? That'll be much harder to combat for an adblocker especially because those IPs will usually be shared with actual content services. Of course this'll add overhead to the visited website manager because the IPs will probably change regularly as they're…

I think it would be only marginally harder to combat, since now you just need a list of IPs to block. Someone would have to maintain the (likely ever changing) list of IPs used, but that's not so different from what's happening now.

Re: Pi-hole 5.0

#156

Post by technocratia » Mon, May 11, 2020, 6:47 AM UTC

pizza wrote: post #146

Does anyone know if pi-hole lets you see per-client bandwidth usage?

It's a DNS server so it has no way of knowing the bandwidth usage of the clients, the traffic is not flowing trough the pi-hole, it just responds to the DNS queries sent to it by the clients.

Re: Pi-hole 5.0

#157

Post by ornornor » Mon, May 11, 2020, 6:52 AM UTC

Waterluvian wrote: post #109

pfundstein wrote: post #102

Earlier quoted context omitted.

Why not use a client based content filter such as uBlock Origin?

Also maybe they use their phone and many combinations of PhoneType + BrowserType don't support the same quality of adblocking as PiHole.

NextDNS is pretty good especially on iOS where you can’t install adblockers (unlike on rooted android)

Re: Pi-hole 5.0

#158

Post by isatty » Mon, May 11, 2020, 6:55 AM UTC

croon wrote: post #147

surround wrote: post #3

Pi-hole is very easy to set up, and it works so well you can basically forget about it from that point on. Blocking ads is nice, but it’s also a huge boon for privacy. I run uBlock origin on all my browsers, but Pi-hole still blocks 30-50% of requests on my network. It’s also really nice to be able to glance at the logs and get an idea of what’s going on on your network, or if there’s any unusual activity. I’m especi…

It was really easy to set-up, but on first day it actually broke an Android TV-app on default settings (meaning it blocked some call that stopped the app from loading through). Ironically, after disabling it for a minute and then loading through the app, it didn't block the video ads (not rendered into the video). YMMV of course, but it wasn't usable for me since everyone in the household needs to understand/solve an…

Which to me is a good thing - smart TV's are garbage. Dumb TV + AppleTV will do just fine.

Re: Pi-hole 5.0

#159

Post by theshrike79 » Mon, May 11, 2020, 6:56 AM UTC

andrei_says_ wrote: post #93

arthurfm wrote: post #64

Earlier quoted context omitted.

> Is there a way to quickly disable/re-enable pihole for the network? Bookmark the following URL http://pi.hole/admin/api.php?disable=120&auth=PWHASH Replace PWHASH with the value of your WEBPASSWORD in setupVars.conf cat /etc/pihole/setupVars.conf | grep 'WEBPASSWORD=' | cut -c13- and '120' with the number of seconds you want to disable the Pi-hole filtering for.

Thank you, I’ve been needing to do this frequently.

What kind of sites, if you don't mind sharing?

I've been using pi-hole for 4 years now and I can remember two situations when I had to disable it - and one of those was cloudflare's fault (PS4 cloud saves don't work with 1.1.1.1 DNS)

Re: Pi-hole 5.0

#160

Post by laumars » Mon, May 11, 2020, 7:01 AM UTC

IntelMiner wrote: post #154

Cross-posting from my comment on Reddit's /r/Linux I'm a little disappointed that they seem to be very uninterested on how to get it working on "unsupported" configurations My x86 gateway currently runs on Gentoo (PFsense kept having random crashing issues) and it's something I'd love to add to it as far as I can tell all Pi-Hole needs is - Lighttpd + PHP (web management portal) - DNSMASq (DNS) - DHCPD (DHCP) - git (…

Pihole comes with some nice features but the core tool could be written in a single shell script (I know this because that’s exactly what I used to do for years before pi-hole even existed).

At its core, all you really need is curl / wget to pull a few text files and then reload dnsmasq.

Sure you’d miss out on the reporting side (which is actually the only reason I switched to pi-hole last year) but it would run on literally any system that runs Linux and dnsmasq.

As for DHCP, I think pi-hole uses dnsmasq for that too. However I’ve wasnt able to get pi-hole to accept my custom DHCP rules for PXE boot images (saves me hunting for USB sticks if someone hands me a trashed system and it’s been invaluable over the years) so I’ve continued to run dhcpd separately from pi-hole. But you don’t even need to do that, all you really need is your existing DHCP server to accept custom DNS resolvers and any consumer router should let you do that. Just make sure you disable DHCP in pi-hole.